Edit tour

Windows Analysis Report
DRL-272112.htm

Overview

General Information

Sample name:	DRL-272112.htm
Analysis ID:	1535872
MD5:	81dc3a960be379710e3a6cc44ca2d4cc
SHA1:	6d309bc8392bd0ac83e2501dbcc5bc04c0c0c266
SHA256:	e14b264dabe8576cd12616f63260ee69deff37f29556e72018642a531f861d8b
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected javascript redirector / loader

Suspicious Javascript code found in HTML file

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Drops PE files

Drops PE files to the windows directory (C:\Windows)

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

PE file contains more sections than normal

PE file contains sections with non-standard names

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\DRL-272112.htm" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2208,i,4527277701206925154,16748076749947478816,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-17T11:32:09.703111+0200	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.4	49741	TCP
2024-10-17T11:32:48.187618+0200	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.4	49753	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Detected javascript redirector / loader

Source: DRL-272112.htm

HTTP Parser: Low number of body elements: 1

Suspicious Javascript code found in HTML file

Source: DRL-272112.htm	HTTP Parser: location.href
Source: DRL-272112.htm	HTTP Parser: .location
Source: DRL-272112.htm	HTTP Parser: .location

Source: DRL-272112.htm

HTTP Parser: Number of links: 0

Source: DRL-272112.htm

HTTP Parser: Base64 decoded: anna.advena@itv.com

Source: DRL-272112.htm

HTTP Parser: Title: Detail notification for https://zoom.us/signin?continue=https%3A%2F%2Fdocs.zoom.us%2F&_x_zm_rtaid=Kvb7ZAmSTVOlLk8V32AY9w.1728638611225.469e3485754cb1c5d0c72651f196c984&_x_zm_rhtaid=994#/login does not match URL

Source: DRL-272112.htm

HTTP Parser: No favicon

Source: DRL-272112.htm

HTTP Parser: No <meta name="author".. found

Source: DRL-272112.htm

HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\LICENSE.txt

Jump to behavior

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49754 version: TLS 1.2

Source:	Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.0.dr
Source:	Binary string: C:\b\s\w\ir\x\w\rc\cdm\protected\out\Release\widevinecdm.dll.pdb source: widevinecdm.dll.0.dr

Source: global traffic

TCP traffic: 192.168.2.4:60422 -> 1.1.1.1:53

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.4:49741
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.4:49753

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pUEoG+9wPyGMs5V&MD=S8Lmrbpl HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pUEoG+9wPyGMs5V&MD=S8Lmrbpl HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: 4b7f334b.soar-1bq.pages.dev
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://123milhas.com/v2/busca/confirmacao-pedido/.
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: DRL-272112.htm	String found in binary or memory: https://4b7f334b.soar-1bq.pages.dev/?cfg=YW5uYS5hZHZlbmFAaXR2LmNvbQ==
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout-new.dafiti.com.br/success/index.html.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout.casasbahia.com.br/compra-finalizada
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout.extra.com.br/compra-finalizada
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout.pontofrio.com.br/compra-finalizada
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: manifest.json3.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://comprasegura.olx.com.br/
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://comprasegura.olx.com.br/pedidos/.
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://dump-truck.appspot.com/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://easylist.to/)
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://emv-qr.googleplex.com/.
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://github.com/easylist)
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://google-wallet-ccr-salvador.pagmob.com.br/pay
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://m.aliexpress.com/p/second-payment/pay-result.html?.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://m.americanas.com.br/compra/pix.
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://rsolomakhin.github.io/pix/.
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://sacolamobile.magazineluiza.com.br/#/comprovante
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://secure.epocacosmeticos.com.br/checkout/#/payment.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://secure.vivara.com.br/checkout?orderFormId=.
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://shopee.com.br/payment/.
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.amazon.com.br/gp/buy/thankyou/handlers/display.html
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.anacapri.com.br/checkout/order-confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.arezzo.com.br/checkout/order-confirmation/.
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.centauro.com.br/checkouts/confirmacao/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.cobasi.com.br/checkout/review.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.elo7.com.br/buyer/order/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.fastshop.com.br/web/checkout-v2/pagamento/confirmacao.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.hering.com.br/checkout/#/payment
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.hurb.com/br/pay/checkout/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.ifood.com.br/pedidos/aguardando-pagamento/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.madeiramadeira.com.br/carrinho/finalizar-pedido/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.motorola.com.br/checkout/#/payment
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.natura.com.br/pedido-concluido/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.netshoes.com.br/checkout/confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.paodeacucar.com/checkout.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.petz.com.br/checkout/confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.riachuelo.com.br/successpage
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.schutz.com.br/checkout/order-confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.sephora.com.br/checkout/success/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.ultrafarma.com.br/checkout/confirmacao/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.zattini.com.br/checkout/confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.zzmall.com.br/checkout/order-confirmation/.
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn
Source: DRL-272112.htm	String found in binary or memory: https://zoom.us/signin?continue=https%3A%2F%2Fdocs.zoom.us%2F&_x_zm_rtaid=Kvb7ZAmSTVOlLk8V32AY9w.172

Source: unknown	Network traffic detected: HTTP traffic on port 60575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 60655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60653
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60650
Source: unknown	Network traffic detected: HTTP traffic on port 60517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60538
Source: unknown	Network traffic detected: HTTP traffic on port 60437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60658
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60657
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60656
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60655
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60533
Source: unknown	Network traffic detected: HTTP traffic on port 60528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60663
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60541
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60540
Source: unknown	Network traffic detected: HTTP traffic on port 60587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60661
Source: unknown	Network traffic detected: HTTP traffic on port 60541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60427
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60425
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60423
Source: unknown	Network traffic detected: HTTP traffic on port 60495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60544
Source: unknown	Network traffic detected: HTTP traffic on port 60609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60433
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60551
Source: unknown	Network traffic detected: HTTP traffic on port 60586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60550
Source: unknown	Network traffic detected: HTTP traffic on port 60425 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60439
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60438
Source: unknown	Network traffic detected: HTTP traffic on port 60530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60437
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60557
Source: unknown	Network traffic detected: HTTP traffic on port 60643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60435
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60434
Source: unknown	Network traffic detected: HTTP traffic on port 60496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60555
Source: unknown	Network traffic detected: HTTP traffic on port 60610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60440
Source: unknown	Network traffic detected: HTTP traffic on port 60516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60560
Source: unknown	Network traffic detected: HTTP traffic on port 60564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60449
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60568
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60567
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60445
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60566
Source: unknown	Network traffic detected: HTTP traffic on port 60621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 60527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60619
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60618
Source: unknown	Network traffic detected: HTTP traffic on port 60462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60617
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60616
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60615
Source: unknown	Network traffic detected: HTTP traffic on port 60471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60614
Source: unknown	Network traffic detected: HTTP traffic on port 60494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60613
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60612
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 60607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60611
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60610
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 60576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60629
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60620
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60627
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60626
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60504
Source: unknown	Network traffic detected: HTTP traffic on port 60531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60625
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60624
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60623
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60621
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 60577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60519
Source: unknown	Network traffic detected: HTTP traffic on port 60554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60631
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60630
Source: unknown	Network traffic detected: HTTP traffic on port 60515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60639
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60637
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60636
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60635
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60512
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60633
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60632
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 60526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 60461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60642
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60641
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60649
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60648
Source: unknown	Network traffic detected: HTTP traffic on port 60438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60647
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60646
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60524
Source: unknown	Network traffic detected: HTTP traffic on port 60642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60645
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60643
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60496
Source: unknown	Network traffic detected: HTTP traffic on port 60452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60492
Source: unknown	Network traffic detected: HTTP traffic on port 60532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 60652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 60578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60452
Source: unknown	Network traffic detected: HTTP traffic on port 60513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60571
Source: unknown	Network traffic detected: HTTP traffic on port 60591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60459
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60579
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60457
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60456
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60577
Source: unknown	Network traffic detected: HTTP traffic on port 60442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60590
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60586
Source: unknown	Network traffic detected: HTTP traffic on port 60453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60462
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60461
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60580
Source: unknown	Network traffic detected: HTTP traffic on port 60627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60468
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60589
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60588
Source: unknown	Network traffic detected: HTTP traffic on port 60441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60480
Source: unknown	Network traffic detected: HTTP traffic on port 60464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60598
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60472
Source: unknown	Network traffic detected: HTTP traffic on port 60534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60471
Source: unknown	Network traffic detected: HTTP traffic on port 60557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60470
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60591
Source: unknown	Network traffic detected: HTTP traffic on port 60628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60479
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60599
Source: unknown	Network traffic detected: HTTP traffic on port 60605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60491
Source: unknown	Network traffic detected: HTTP traffic on port 60639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60490
Source: unknown	Network traffic detected: HTTP traffic on port 60486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60487
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60486
Source: unknown	Network traffic detected: HTTP traffic on port 60512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60483
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60481
Source: unknown	Network traffic detected: HTTP traffic on port 60497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60489
Source: unknown	Network traffic detected: HTTP traffic on port 60466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60661 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60613 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60658 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60609

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49754 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\Google.Widevine.CDM.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\LICENSE.txt	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\Filtering Rules	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\optimization-hints.pb	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_platform_specific\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_platform_specific\win_x64\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_platform_specific\win_x64\widevinecdm.dll.sig	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_platform_specific\win_x64\widevinecdm.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_4624_1109569605

Jump to behavior

Source: widevinecdm.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: Number of sections : 12 > 10

Source: classification engine

Classification label: mal48.phis.winHTM@44/24@43/3

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\DRL-272112.htm"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2208,i,4527277701206925154,16748076749947478816,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2208,i,4527277701206925154,16748076749947478816,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source:	Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.0.dr
Source:	Binary string: C:\b\s\w\ir\x\w\rc\cdm\protected\out\Release\widevinecdm.dll.pdb source: widevinecdm.dll.0.dr

Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .00cfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .gxfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .retplne
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .voltbl
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: _RDATA
Source: widevinecdm.dll.0.dr	Static PE information: section name: .00cfg
Source: widevinecdm.dll.0.dr	Static PE information: section name: .gxfg
Source: widevinecdm.dll.0.dr	Static PE information: section name: .retplne
Source: widevinecdm.dll.0.dr	Static PE information: section name: .rodata
Source: widevinecdm.dll.0.dr	Static PE information: section name: _RDATA
Source: widevinecdm.dll.0.dr	Static PE information: section name: malloc_h

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_platform_specific\win_x64\widevinecdm.dll			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\Google.Widevine.CDM.dll			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_platform_specific\win_x64\widevinecdm.dll			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\Google.Widevine.CDM.dll			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\LICENSE.txt

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\Google.Widevine.CDM.dll	0%	ReversingLabs
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_platform_specific\win_x64\widevinecdm.dll	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://poalim.xyz	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://reshim.org	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://unotv.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://zdrowietvn.pl	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://baomoi.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://rws1nvtvt.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://radio2.be	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://talkdeskqaid.com	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://pudelek.pl	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://wildixin.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://cognitiveai.ru	0%	URL Reputation	safe
https://nacion.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://talkdeskstgid.com	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
https://wpext.pl	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://smpn106jkt.sch.id	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://the42.ie	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://clmbtech.com	0%	URL Reputation	safe
https://standardsandpraiserepurpose.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	216.58.206.78	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.196	true	false	unknown
4b7f334b.soar-1bq.pages.dev	unknown	unknown	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	URL Reputation: safe	unknown
https://comprasegura.olx.com.br/pedidos/.	optimization-hints.pb.0.dr	false		unknown
https://mercadolivre.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://easylist.to/)	LICENSE.txt.0.dr	false		unknown
https://reshim.org	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://unotv.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false		unknown
https://zdrowietvn.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://johndeere.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://supereva.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://www.motorola.com.br/checkout/#/payment	optimization-hints.pb.0.dr	false		unknown
https://bolasport.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://www.cobasi.com.br/checkout/review.	optimization-hints.pb.0.dr	false		unknown
https://desimartini.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.0.dr	false	URL Reputation: safe	unknown
https://emv-qr.googleplex.com/.	optimization-hints.pb.0.dr	false		unknown
https://hearty.gift	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://4b7f334b.soar-1bq.pages.dev/?cfg=YW5uYS5hZHZlbmFAaXR2LmNvbQ==	DRL-272112.htm	false		unknown
https://heartymail.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.0.dr	false		unknown
https://www.paodeacucar.com/checkout.	optimization-hints.pb.0.dr	false		unknown
https://p106.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://radio2.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://finn.no	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	URL Reputation: safe	unknown
https://www.zzmall.com.br/checkout/order-confirmation/.	optimization-hints.pb.0.dr	false		unknown
https://p24.hu	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.0.dr	false		unknown
https://mercadopago.com.pe	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://text.com	sets.json.0.dr	false		unknown
https://mightytext.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hazipatika.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nacion.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://checkout-new.dafiti.com.br/success/index.html.	optimization-hints.pb.0.dr	false		unknown
https://chennien.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.travel	sets.json.0.dr	false	URL Reputation: safe	unknown
https://zoom.us/signin?continue=https%3A%2F%2Fdocs.zoom.us%2F&_x_zm_rtaid=Kvb7ZAmSTVOlLk8V32AY9w.172	DRL-272112.htm	false		unknown
https://deccoria.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.0.dr	false		unknown
https://interia.pl	sets.json.0.dr	false		unknown
https://bonvivir.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wpext.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://www.natura.com.br/pedido-concluido/.	optimization-hints.pb.0.dr	false		unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://infoedgeindia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://comprasegura.olx.com.br/	optimization-hints.pb.0.dr	false		unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smpn106jkt.sch.id	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elpais.uy	sets.json.0.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://www.hurb.com/br/pay/checkout/.	optimization-hints.pb.0.dr	false		unknown
https://the42.ie	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eleconomista.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.0.dr	false		unknown
https://mercadolivre.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://clmbtech.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://07c225f3.online	sets.json.0.dr	false		unknown
https://salemovefinancial.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved		unknown	unknown	false
142.250.185.196	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1535872
Start date and time:	2024-10-17 11:30:59 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	DRL-272112.htm
Detection:	MAL
Classification:	mal48.phis.winHTM@44/24@43/3
Cookbook Comments:	Found application associated with file extension: .htm

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 64.233.167.84, 142.250.186.46, 34.104.35.123, 216.58.206.74, 142.250.185.74, 142.250.185.106, 142.250.181.234, 142.250.186.74, 216.58.206.42, 172.217.23.106, 172.217.16.202, 142.250.186.170, 142.250.186.138, 142.250.186.106, 172.217.18.10, 142.250.185.138, 142.250.186.42, 142.250.184.202, 142.250.185.170, 199.232.214.172, 192.229.221.95, 142.250.185.227
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, optimizationguide-pa.googleapis.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: DRL-272112.htm

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	SafeguardPDFViewer_v3.exe	Get hash	malicious	Unknown	Browse
	SafeguardPDFViewer_v3.exe	Get hash	malicious	Unknown	Browse
	Shipping Documents (SHFYA).HTML	Get hash	malicious	Unknown	Browse
	ATT037484_Msg#189815.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	EMPLOYEE APPRAISAL REVIEW FOR Alejandra.madrazo Q4 2024.pdf	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	http://ghiud.harvis.cloud/4mwBgt17516lNdm1204vejpbatzjo21000KUALJDQWQJDDMWF10719LGSH20036h17	Get hash	malicious	Unknown	Browse
	https://onedrive.live.com/redir?resid=7EA77BA2B31F5860%21809&authkey=%21ACBUocwpcr44pZ4&page=View&wd=target%28Quick%20Notes.one%7C332160b9-4557-46d8-85f4-3a5f81cbb137%2FASP%20%E2%80%9CProgetto%20Persona%E2%80%9D%7C57dac1b5-636f-4aae-88ec-832b5318580f%2F%29&wdorigin=NavigationUrl	Get hash	malicious	HtmlDropper	Browse
	Account report.docx	Get hash	malicious	Unknown	Browse
	Account report.docx	Get hash	malicious	Unknown	Browse
	Xfab BENEFIT ENROLLMENT GUIDE 2024.pdf	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	PI-90349003421.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.45
	ATT037484_Msg#189815.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	EMPLOYEE APPRAISAL REVIEW FOR Alejandra.madrazo Q4 2024.pdf	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	Pyt Copy.scr.exe	Get hash	malicious	Snake Keylogger	Browse	13.107.246.45
	http://ghiud.harvis.cloud/4mwBgt17516lNdm1204vejpbatzjo21000KUALJDQWQJDDMWF10719LGSH20036h17	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://onedrive.live.com/redir?resid=7EA77BA2B31F5860%21809&authkey=%21ACBUocwpcr44pZ4&page=View&wd=target%28Quick%20Notes.one%7C332160b9-4557-46d8-85f4-3a5f81cbb137%2FASP%20%E2%80%9CProgetto%20Persona%E2%80%9D%7C57dac1b5-636f-4aae-88ec-832b5318580f%2F%29&wdorigin=NavigationUrl	Get hash	malicious	HtmlDropper	Browse	13.107.246.45
	Xfab BENEFIT ENROLLMENT GUIDE 2024.pdf	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	ATTN1.html	Get hash	malicious	Unknown	Browse	13.107.246.45
	http://nndpdnm.3utilities.com/#bd5on/p8la73b/LoiU9/1oQd1tRDE-SUREIDANt92YuMXZpJHZuV3bmxWYi9GbnBUY5hGZhBHc15Cdp1WY	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	Play_VoiceMsg_daniel.rivera2@adiglobal.com_{RANDOM_NUMBER6}CQDM.html	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	13.107.246.45
google.com	Bestireno Transformados SL PEDIDO 268884.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	142.250.185.97
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.217.23.110
	SafeguardPDFViewer_v3.exe	Get hash	malicious	Unknown	Browse	142.250.186.68
	Pedido de Cota#U00e7#U00e3o-24100004_lista comercial.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	142.250.185.97
	SafeguardPDFViewer_v3.exe	Get hash	malicious	Unknown	Browse	142.250.185.164
	Bestireno Transformados SL PEDIDO 268884.vbs	Get hash	malicious	Unknown	Browse	142.250.185.65
	Shipping Documents (SHFYA).HTML	Get hash	malicious	Unknown	Browse	142.250.186.100
	Nowe zam.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	142.250.185.97
	ATT037484_Msg#189815.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	142.250.186.132
	EMPLOYEE APPRAISAL REVIEW FOR Alejandra.madrazo Q4 2024.pdf	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	142.250.186.132

ASNs

⊘No context

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	tsle.exe	Get hash	malicious	RedLine	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	SafeguardPDFViewer_v3.exe	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	SafeguardPDFViewer_v3.exe	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	PI-90349003421.xlsx	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	ATT037484_Msg#189815.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	EMPLOYEE APPRAISAL REVIEW FOR Alejandra.madrazo Q4 2024.pdf	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	Pyt Copy.scr.exe	Get hash	malicious	Snake Keylogger	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	new order 32724.bat.exe	Get hash	malicious	FormBook	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	http://ghiud.harvis.cloud/4mwBgt17516lNdm1204vejpbatzjo21000KUALJDQWQJDDMWF10719LGSH20036h17	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	https://onedrive.live.com/redir?resid=7EA77BA2B31F5860%21809&authkey=%21ACBUocwpcr44pZ4&page=View&wd=target%28Quick%20Notes.one%7C332160b9-4557-46d8-85f4-3a5f81cbb137%2FASP%20%E2%80%9CProgetto%20Persona%E2%80%9D%7C57dac1b5-636f-4aae-88ec-832b5318580f%2F%29&wdorigin=NavigationUrl	Get hash	malicious	HtmlDropper	Browse	184.28.90.27 13.107.246.45 20.12.23.50

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\Google.Widevine.CDM.dll	ATT037484_Msg#189815.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	Project_Proposal_Review_and_Approval13617.pdf	Get hash	malicious	Unknown	Browse
	ordine.pdf	Get hash	malicious	HtmlDropper	Browse
	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Get hash	malicious	Unknown	Browse
	View alert details #20GBQ4J.html	Get hash	malicious	HTMLPhisher	Browse
	btm4e0L3pw.lnk	Get hash	malicious	Numando	Browse
	ATT00001.png	Get hash	malicious	Unknown	Browse
	shelbycountytn.gov.pdf	Get hash	malicious	Unknown	Browse
	https://google.com/amp/s/login.sharesyncportal.tech/dmYzPMej	Get hash	malicious	HTMLPhisher	Browse
	EPAYMENT_Receipt.html	Get hash	malicious	Unknown	Browse
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_platform_specific\win_x64\widevinecdm.dll	View alert details #20GBQ4J.html	Get hash	malicious	HTMLPhisher	Browse
	shelbycountytn.gov.pdf	Get hash	malicious	Unknown	Browse
	EPAYMENT_Receipt.html	Get hash	malicious	Unknown	Browse
	Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html	Get hash	malicious	HTMLPhisher	Browse
	https://qrco.de/bfQgn5	Get hash	malicious	Unknown	Browse
	Inv_Doc_18#908.pdf	Get hash	malicious	Unknown	Browse
	http://www.revsharboomerang.com	Get hash	malicious	Unknown	Browse
	AMA - 375,545.04.htm	Get hash	malicious	Unknown	Browse
	ACH Payment Details_(Dcorbett)CQDM.html	Get hash	malicious	Unknown	Browse
	doc_inv_09-12#965.pdf	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\Google.Widevine.CDM.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2877728
Entropy (8bit):	6.868480682648069
Encrypted:	false
SSDEEP:	49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
MD5:	477C17B6448695110B4D227664AA3C48
SHA1:	949FF1136E0971A0176F6ADEA8ADCC0DD6030F22
SHA-256:	CB190E7D1B002A3050705580DD51EBA895A19EB09620BDD48D63085D5D88031E
SHA-512:	1E267B01A78BE40E7A02612B331B1D9291DA8E4330DEA10BF786ACBC69F25E0BAECE45FB3BAFE1F4389F420EBAA62373E4F035A45E34EADA6F72C7C61D2302ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: ATT037484_Msg#189815.html, Detection: malicious, Browse Filename: Project_Proposal_Review_and_Approval13617.pdf, Detection: malicious, Browse Filename: ordine.pdf, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, Detection: malicious, Browse Filename: View alert details #20GBQ4J.html, Detection: malicious, Browse Filename: btm4e0L3pw.lnk, Detection: malicious, Browse Filename: ATT00001.png, Detection: malicious, Browse Filename: shelbycountytn.gov.pdf, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: EPAYMENT_Receipt.html, Detection: malicious, Browse
Reputation:	moderate, very likely benign file
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....fd.........." ......(..........A&.......................................,.......,...`A.........................................V......V......`,......`+..p....+. )...p,......D.8....................C.(.....(.8...........p\..............................text.....(.......(................. ..`.rdata..h.....(.......(.............@..@.data....l......&.................@....pdata...p...`+..r.................@..@.00cfg..(.....+......p+.............@..@.gxfg....$....+..&...r+.............@..@.retplnel.... ,.......+..................tls.........0,.......+.............@....voltbl.D....@,.......+................._RDATA.......P,.......+.............@..@.rsrc........`,.......+.............@..@.reloc.......p,.......+.............@..B........................................................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	6.02086725086136
Encrypted:	false
SSDEEP:	48:p/hCdQAdJjRkakCi0LXjX9mqjW6JmfQkNWQzXXf2gTs:RtQ1aaxXrjW6JuQEWQKas
MD5:	3E839BA4DA1FFCE29A543C5756A19BDF
SHA1:	D8D84AC06C3BA27CCEF221C6F188042B741D2B91
SHA-256:	43DAA4139D3ED90F4B4635BD4D32346EB8E8528D0D5332052FCDA8F7860DB729
SHA-512:	19B085A9CFEC4D6F1B87CC6BBEEB6578F9CBA014704D05C9114CFB0A33B2E7729AC67499048CB33823C884517CBBDC24AA0748A9BB65E9C67714E6116365F1AB
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJHb29nbGUuV2lkZXZpbmUuQ0RNLmRsbCIsInJvb3RfaGFzaCI6Im9ZZjVLQ2Z1ai1MYmdLYkQyWFdBS1E5Nkp1bTR1Q2dCZTRVeEpGSExSNWMifSx7InBhdGgiOiJtYW5pZmVzdC5qc29uIiwicm9vdF9oYXNoIjoiYk01YTJOU1d2RkY1LW9Tdml2eFdqdXVwZ05pblVGakdPQXRrLTBJcGpDZyJ9XSwiZm9ybWF0IjoidHJlZWhhc2giLCJoYXNoX2Jsb2NrX3NpemUiOjQwOTZ9XSwiaXRlbV9pZCI6Im5laWZhb2luZGdnZmNqaWNmZmtncG1ubHBwZWZmYWJkIiwiaXRlbV92ZXJzaW9uIjoiMS4wLjI3MzguMCIsInByb3RvY29sX3ZlcnNpb24iOjF9","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KTPeHzS0ybFaz3_br3ASYWHjb6Ctul92067u2JMwtNYYm-4KxLiSkJZNBIzhm6hNSEW2p5kUEvHD0TjhhFGCZnWm9titj2bqJayCOAGxZb5BO74JJCRfy5Kwr1KSS4nvocsZepnHBmCiG2OV3by-Lyf1h1uU3X3bDfD92O0vJzrA8rwL2LrwIk-BolLo5nlM0I_MZwg8DhZ8SFBu9GGRVB2XrailDrv4SgupFE9gqA1HY6kjRjoyoAHbRRxZdBNNt9IKNdxNyaF9NcNRY8dAedNQ9Tw3YNp5jB7R9lcjO4knn58RdH2h_GiJ4l96StcXA4e7cqbJ77P-c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.974403644129192
Encrypted:	false
SSDEEP:	3:SLVV8T+WSq2ykFDJp9qBn:SLVqZS5p0B
MD5:	D30A5BBC00F7334EEDE0795D147B2E80
SHA1:	78F3A6995856854CAD0C524884F74E182F9C3C57
SHA-256:	A08C1BC41DE319392676C7389048D8B1C7424C4B74D2F6466BCF5732B8D86642
SHA-512:	DACF60E959C10A3499D55DC594454858343BF6A309F22D73BDEE86B676D8D0CED10E86AC95ECD78E745E8805237121A25830301680BD12BFC7122A82A885FF4B
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.595307058143632
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFooG+HhFFKS18CWjhXLXGPQ3TRpvF/FHddTcplFHddTcVYA:F6VlM5PpKS18hRIA
MD5:	BBC03E9C7C5944E62EFC9C660B7BD2B6
SHA1:	83F161E3F49B64553709994B048D9F597CDE3DC6
SHA-256:	6CCE5AD8D496BC5179FA84AF8AFC568EEBA980D8A75058C6380B64FB42298C28
SHA-512:	FB80F091468A299B5209ACC30EDAF2001D081C22C3B30AAD422CBE6FEA7E5FE36A67A8E000D5DD03A30C60C30391C85FA31F3931E804C351AB0A71E9A978CC0F
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{. "manifest_version": 2,. "name": "windows-mf-cdm",. "version": "1.0.2738.0",. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1766
Entropy (8bit):	6.025553720712266
Encrypted:	false
SSDEEP:	48:p/hQyOXVA6QJkTkakUNMVhakt6HECVHSkb1bX0IYG4Zy:RmV9+a/KVh5t6HEgHSKYG4g
MD5:	25750ECB01ED710D7C180A59C02707FD
SHA1:	E082729C9DCE2A712F91021A9C79ECC2087A206C
SHA-256:	566D513E00CB3348FF0881851304DC27EDA5CDD5058FE84214C19A426D142099
SHA-512:	1A1B42B5A4BD3F46FC0D7AD6532640C7B9C584ECFD7F21FD722FA2F8DB0A9F4DDDF3D9F8CC3383F0D29C91E3BAF7349F0586D0E7747B6CE66C789BB72282B368
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJtYW5pZmVzdC5qc29uIiwicm9vdF9oYXNoIjoiU090aW45SUZTaE4wUmxXRlcyZkw3bkdjcXFOajROZzRmWXdJdzNkUFRGQSJ9LHsicGF0aCI6Im9wdGltaXphdGlvbi1oaW50cy5wYiIsInJvb3RfaGFzaCI6Ikg3VjZLa2c5RGMzUTRwTTQxYnRTLTRIU191TUk4OGJpdm0tTnQzdUJoRWMifV0sImZvcm1hdCI6InRyZWVoYXNoIiwiaGFzaF9ibG9ja19zaXplIjo0MDk2fV0sIml0ZW1faWQiOiJsbWVsZ2xlamhlbWVqZ2lucGJvYWdkZGdkZmJlcGdtcCIsIml0ZW1fdmVyc2lvbiI6IjQ3MCIsInByb3RvY29sX3ZlcnNpb24iOjF9","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"NT6kNHNFhCjRg2c3ATVDExHm5D0_TbRN-xTmZAWsg7JTXcMiPRTGq0kdr6oVK5eDVmzkISqnV3-apdmxGmO-BjImJYo8sIx4ftlOQIW-1ApFlSAUhMw0Kld1fydY-0IldItRbX2atCY2IHvw_aYDPF3k_C3D67zA5IXmpK68Yczchl6xDx1_jrQeFKsIO4jsd2hZfnevPl3YFfXaju_P_Gj4z3kPReprY6LgzLTZsWrLk63kVjrmgXRDkd6KajG4un1u-dGNebXpChga4mKSv2AYEoBmO4tzpHsj9ITHlP2U8wokwx_vnh_L-9EwuwRJDBqaFl70LEeAmvLN2LJnEosjx

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.901334507294453
Encrypted:	false
SSDEEP:	3:SUQDWWVJ3HV1RU/nuXWOn:SUyRVJ3PRUq
MD5:	7F2D05BCE73359BFCC3723789ED71954
SHA1:	F73F6BE4482DC7C6A3AF6CFF9938D7AA055CA9DC
SHA-256:	5FD3C75C5A66B485625DDCEA917B971059763534DAE810501C9ACEFDF83474E2
SHA-512:	F5A5F79D2D682427D716C1A01AD827829D45F70A6360B205139A94CC36CDE97F060C88D54031F68C45EC2960054FC0D31031BC23E4E67082B9CAACC55A1B61A7
Malicious:	false
Preview:	1.1273850d75b83391a4637cdd77399cb0b82f915b3ed11e4c846685ec6c782312

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.455641662670641
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFzIe4/+S1spHBHcDKhtH8tAn:F6VlMQ/+S1sphSKH8tAn
MD5:	B50984059C075AC77B64EED27124C211
SHA1:	8D6C572D8B7672E84D80595E5B71B0F52413E15E
SHA-256:	48EB629FD2054A13744655855B67CBEE719CAAA363E0D8387D8C08C3774F4C50
SHA-512:	CF66E01855B71E5E8252539E4BE022E5AB8E2A45FF5F0888E785BDF3D5BE083302132E64A6FD0E12C44BCD0B593A431C852CF770B091935B4E38FC4D110AE861
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "Optimization Hints",. "version": "470",. "ruleset_format": "1.0.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\optimization-hints.pb

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	53518
Entropy (8bit):	7.976109659112707
Encrypted:	false
SSDEEP:	1536:/zehGBKxdYm83YG3iHb8fZANCdX4SjsxAK:x0xW3YG3i78fZk67jsb
MD5:	E58A5ADD6B0CEA565BFDA6D4ACB42884
SHA1:	7520764A13597D28D6700EDE2C47504E6A0B7264
SHA-256:	60A43D5365311C45766CAEBBF1B5EF919AC71DBD14F9025C21DEF3C0F2E32082
SHA-512:	B424A8D7CF1EDF2D91243892F3B91E5DB3B90884537D2F29E10B5AA3FC2C1B042E933773813E2AD12245A00760D55948164B1066ADC0320C8D14F7C548EAFFB4
Malicious:	false
Preview:	............I.....g2.I..jI..n).+..)...h.+.A7p..q.:S4.Z...O.. R..\|....Da.e.?..W.-..ni2.....[.....6%8....x..y".b.Y7^.n......%/...f..c../.CY....j..\|].b..+.f..].{S.s..J...\|..nn..G..jb).Mn..../....R%.Fm.....K.....&.n.P.]..M.q:E..#^..O.....+...%\|{....5d..............=....X......._...OS1...+.q...7..vzf.....(....iVp....7..."QA.k`......Q...Y../X4..`...<+.@.U...m .'.X6...-.aD....<..w..7bv.e......<~.J.d...i..7..o}x_...B.T....V.et....u.{/.....p6.....t.Y(a.E......t.....P..45.a...!B-......B.RY#H....E....%...I..a.....$...T....7;...y..`.l.p..kv..`..q]...z.9rX...Rb..Q.N..../.>....p.ah.........z.\.Y}2W..o.?..-6=y...2[:..t7(t)....^.H...cl"]F."..@'h....t..s..Pf..SA.yCs....IuT..=.6...{...X....,...}.....ddE.2............YU..HQ..h.i.v...;..b....}.]K..../O.....]S~.l.H...........&....~m....3..l.l*RN"..k..1f.x.$..n...P-..](.Z./.........9...WJ\. /.B.Q....h.R...e.............Fg]...........?.Z..iH.Kyxc.e.P...H.....1N.Ac.;.4..he..b.V.w..'.....Z...K.4......p...2..9.s.."

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\Filtering Rules

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	74272
Entropy (8bit):	5.535436646838848
Encrypted:	false
SSDEEP:	1536:GB9Cdg51kGLmOSe1pEQHdPr4l0TmmJ2I7CwguaRZrgMQUavJX5vwKf:Sok1RLtb1ptdPrYk1J2IPguangMQ3X5P
MD5:	B23DD5B6ECCB460003EA37BA0F5E3730
SHA1:	FD444553CB7699F84CE7E5664232771673DCF67D
SHA-256:	7F7F432C27D97DEE184DCD3EA20F731674C008BE849C0136F9C5358E359F3EA9
SHA-512:	7E47BD172C4BD4C65F063A8FA3FB33ED47F29156EB20E42D4E8EA73C6F02526A30FFE907BE5B7C1406D4EAA71FBEC7C0D557C376DCCD0A1A961E2F61B3431181
Malicious:	false
Preview:	............0.8.@.R.-728x90...........0.8.@.R.adtdp.com^..........0.8.@.R.yomeno.xyz^..........0.8.@.R.yellowblue.io^..........0.8.@.R.thubanoa.com^..........0.8.@.R.ad999.biz^..........0.8.@.R._468_60...........0.8.@.R.adrecover.com^..........0.8.@.R.pemsrv.com^..........0.8.@.R.mnaspm.com^..........0.8.@.R..ar/ads/."......0.8.@.R./plugins/cactus-ads/.,........0.8.@.R.mysmth.net/nForum//ADAgent_.>...........worldstar.com0.8.@.R.js.assemblyexchange.com/wana...........0.8.@.R.indoleads.com^.%......0.8.@.R.discordapp.com/banners/.(........0.8.@.R.looker.com/api/internal/.#........0.8.@.R.broadstreetads.com^.(........0.8.@.R.shikoku-np.co.jp/img/ad/..........0.8.@.R./banner.cgi?..........0.8.@.R./in/track?data=.!......0.8.@.R.linkbucks.com/tmpl/..........0.8.@.R.clicktripz.com^..........0.8.@.R.-ad-manager/..........0.8.@.R./page-links-to/dist/new-tab.js........0.8.@.R.files.slack.com^.$........0.8.@.R.admitad-connect.com^.2........0.8.@.R"cloudfront.net/js/common/invoke.js..........0.8

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\LICENSE.txt

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	24623
Entropy (8bit):	4.588307081140814
Encrypted:	false
SSDEEP:	384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm0:mvagXreRnTqzazWgj0v6XqD
MD5:	D33AAA5246E1CE0A94FA15BA0C407AE2
SHA1:	11D197ACB61361657D638154A9416DC3249EC9FB
SHA-256:	1D4FF95CE9C6E21FE4A4FF3B41E7A0DF88638DD449D909A7B46974D3DFAB7311
SHA-512:	98B1B12FF0991FD7A5612141F83F69B86BC5A89DD62FC472EE5971817B7BBB612A034C746C2D81AE58FDF6873129256A89AA8BB7456022246DC4515BAAE2454B
Malicious:	false
Preview:	EasyList Repository Licences.... Unless otherwise noted, the contents of the EasyList repository.. (https://github.com/easylist) is dual licensed under the GNU General.. Public License version 3 of the License, or (at your option) any later.. version, and Creative Commons Attribution-ShareAlike 3.0 Unported, or.. (at your option) any later version. You may use and/or modify the files.. as permitted by either licence; if required, "The EasyList authors.. (https://easylist.to/)" should be attributed as the source of the.. material. All relevant licence files are included in the repository..... Please be aware that files hosted externally and referenced in the.. repository, including but not limited to subscriptions other than.. EasyList, EasyPrivacy, EasyList Germany and EasyList Italy, may be.. available under other conditions; permission must be granted by the.. respective copyright holders to authorise the use of their material.......Creative Commons Attribut

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1529
Entropy (8bit):	5.990179229242317
Encrypted:	false
SSDEEP:	24:pZRj/flTHYe1DxxpTkYbKCCojeT31zkaoX63wMHF48I31RwCCyqoX6kyKlklyJqw:p/h4YDxxlbKlTlkakgPLI3hCyqkwnlKD
MD5:	2FF08C4B4128F634CBBFEA0C1C44AA2E
SHA1:	45D11E57DDF29E843AC8545C7D06CDDB5DF3E962
SHA-256:	33B6F2ECD5FB7F9FAF538F29808716EFA337A653809943A8E4B5E450B734DA09
SHA-512:	14BD9E921E1DB9AC8720C1177897DB624292865D29B976ED9CCCEE572726D7D123A8F39E470987DF796AE0552861FBAE056CDB395F0CB8B0E699C28F5E221999
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"ifBoq-woYhqxB78EqRoo2fPRIEfkuykYMlD9kWeeG2QS6-R5YvGNJ9n5OljLXGjvK5U3MDFRLi-UCguxuUaoFjU_QeSCiOLxvDS5JHdk8Bbba8fCW6ZKnH_fvocQD8W7Hj0reH3gOPmD7sIraz8IvG86GRuGPqsxbgc_BRtOCa5KRgqaxfjt7tKlOtaUoO3_qsNlf_8F8k0tNZh131RRIEaXw53z3ZzGpWtgYC0u6s0JKag8l

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8568101737886993
Encrypted:	false
SSDEEP:	3:SWcgK7GtszDAAnHT:SWc97GWzDlnHT
MD5:	6DBEDE254AF8A23D6CB2ABAEA8D2E38F
SHA1:	A827D46FA5D53CB7B134F143CC15A30BA015ED21
SHA-256:	376ED55CD5AB45C0F7BAA1AF0AC2637C33DEA6D1D4683B729AE7CE764F70DAA1
SHA-512:	0F28FD8AF582C18ECCCC1321B94902501D31C4B6C1D11684780DED6217C14E1B313F58A644516F37AE69232F1C2861915337A4D84185E18124F40C629A50B7F9
Malicious:	false
Preview:	1.3651711652892acf34795b2c7e4d401ed2274c20e952f65cf52deeeef5bbf9b5

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.547350270682037
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFHXG7LGMdv5HcDKhtUJKS1KPYn:F6VlMZWuMt5SKPS1eY
MD5:	3448D97DA638C7EF0FBCA9B6949FFC8F
SHA1:	36D8434F26F0316FAB4627F7856FCA7291FE8ADF
SHA-256:	1700A11FD1E58367B450A41B2AE5FD26ECB5CDB459869C796C7DDE18F1D30F73
SHA-512:	9BF9055B2EF82BD1D2A1E94009FED2D3481FE2DC336D306FA0DB786658EFA5B72C9A9A214A829B9FCC4222476051871FF012009C64F09B9109072ABDF3DEF8CC
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "Subresource Filtering Rules",. "ruleset_format": 1,. "version": "9.51.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	473
Entropy (8bit):	4.388167319950301
Encrypted:	false
SSDEEP:	6:LOT6w+DmsDZrkrDxBYRgELGNB+cIMLohXOl0t1iKR/UFioWd9+iAt4jZMeLhJoUs:iwDtVEDsCDLeelyigqBjt4eK2f55
MD5:	F6719687BED7403612EAED0B191EB4A9
SHA1:	DD03919750E45507743BD089A659E8EFCEFA7AF1
SHA-256:	AFB514E4269594234B32C873BA2CD3CC8892E836861137B531A40A1232820C59
SHA-512:	DD14A7EAE05D90F35A055A5098D09CD2233D784F6AC228B5927925241689BFF828E573B7A90A5196BFDD7AAEECF00F5C94486AD9E3910CFB07475FCFBB7F0D56
Malicious:	false
Preview:	Google LLC and its affiliates ("Google") own all legal right, title and.interest in and to the content decryption module software ("Software") and.related documentation, including any intellectual property rights in the.Software. You may not use, modify, sell, or otherwise distribute the Software.without a separate license agreement with Google. The Software is not open.source software...If you are interested in licensing the Software, please contact.www.widevine.com.

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1550
Entropy (8bit):	5.9461543350675905
Encrypted:	false
SSDEEP:	48:p/hFkmoyMTI1jglp6NjkakKwk+R2VJAz5s:RhMka5adwTYQz5s
MD5:	98B310FC33843D771DA0089FA155EDB2
SHA1:	5690A43F43673B947EB4C433CB4F5488A287E29C
SHA-256:	28F09A4AF935D2894689CC00658D597257422CAFF20A01055EFD8E78AD5E829F
SHA-512:	E76830974EA54C94E857179CA0DA893E088034367CA5C33E71C1016B788E737D65AB49AD9A9E6FEB85385B963AF5C13DB0A91E3F3072AC91600E91A1CEA0AB6F
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KnESAO6ts6E14P0aoVwC_yghkUn7_i9PCMh0NvK44eLJL04dv

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_platform_specific\win_x64\widevinecdm.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	19236784
Entropy (8bit):	7.70214269860876
Encrypted:	false
SSDEEP:	393216:FPRzXYeXFyjsrZuvpYl5SJIhw7PJeP9TZHZMaMq0Vrq8P:DFyjs0pYl1hwDJeVT7erq8P
MD5:	9D76604A452D6FDAD3CDAD64DBDD68A1
SHA1:	DC7E98AD3CF8D7BE84F6B3074158B7196356675B
SHA-256:	EB98FA2CFE142976B33FC3E15CF38A391F079E01CF61A82577B15107A98DEA02
SHA-512:	EDD0C26C0B1323344EB89F315876E9DEB460817FC7C52FAEDADAD34732797DAD0D73906F63F832E7C877A37DB4B2907C071748EDFAD81EA4009685385E9E9137
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: View alert details #20GBQ4J.html, Detection: malicious, Browse Filename: shelbycountytn.gov.pdf, Detection: malicious, Browse Filename: EPAYMENT_Receipt.html, Detection: malicious, Browse Filename: Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: Inv_Doc_18#908.pdf, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: AMA - 375,545.04.htm, Detection: malicious, Browse Filename: ACH Payment Details_(Dcorbett)CQDM.html, Detection: malicious, Browse Filename: doc_inv_09-12#965.pdf, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Gf.........." ......o.........P.l......................................p].....c.%...`A..........................................!.......!...... ]......`[..$...f%..!...0].0:....!.8.....................!.(...`cp.@...........p.!..............................text.....o.......o................. ..`.rdata..x.....o.......o.............@..@.data...pv8...".......".............@....pdata...$...`[..&....#.............@..@.00cfg..0.....\.......$.............@..@.gxfg... (....\......$.............@..@.retplne......\.......%..................rodata.......\.......%............. ..`.tls..........\.......%.............@..._RDATA..\.....]...... %.............@..@malloc_h......]......"%............. ..`.rsrc........ ]......$%.............@..@.reloc..0:...0]..<...%.............@..B................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_platform_specific\win_x64\widevinecdm.dll.sig

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1427
Entropy (8bit):	7.572464059652219
Encrypted:	false
SSDEEP:	24:38H/VZn47VBRxgCUQuODHBJeriJ8yojUdnkLvXWgl0oHLrUXAokYH/o8j/bmspTh:38HdurRxHSOlAiqYoXWVDXJ/o8zbmsFh
MD5:	A19EC48B4B28F3AA9C32150DCA8C0E39
SHA1:	02981E40B643C2A987D47BF58F42B7F3CA5AAF07
SHA-256:	D363751B0EE48517DA1B56C17FFCD78DD57F25B092B09879667DB10338077621
SHA-512:	718A24E1FB45AB0FD3DB5A5C45B0E0061D9061D8615E2A8D6DB2150BF72267E96774094A6FC07A250D5BBBC5133A1CB635D8F7ADC5B1751FA99327FCE9555941
Malicious:	false
Preview:	....0...0...........6cd/+J.v{..B...0....H........0}1.0...U....US1.0...U....Washington1.0...U....Kirkland1.0...U....Google1.0...U....Widevine1"0 ..U....widevine-codesign-root-ca0...171013173909Z..271011173909Z0y1.0...U....US1.0...U....Washington1.0...U....Kirkland1.0...U....Google1.0...U....Widevine1.0...U....widevine-vmp-codesign0.."0....H.............0.........2F..8.e..-....$r...{^........0.%.HA...sA"D.q.=6...#.J.N.......&..k;.+...<xF.......B8.)S....o..\|Ci.F.A6....J.......Y..4..{.5u.9N...=...#.M..s.F!j.f%&ld.R...?!Ot@......#.f..O..[.V.p0y....+...S.].....M.=.9...>.. ........>.:....1tl.....`D/c..j..........0..0...U......L...cC.E..R.n...$.0...U.#..0....=..tW....!.B.#U).0...U....0.0...U........0...U.%..0...+.......0...+.....y........0....H.............g.."..[..t{.4~.,.G....4K.....(x$...} ....N..b\|d......h..u6?.L.(&.Oup...$!...4R. 5.-...s...K/..U[..[.+.sAX*.~...^0..ba>;.#....x...b.-1...E..l....S.n.a....)U .q..C>d:...<[..F5...7...[.-.l}.T Lc.X..Qf...z..:.Q..e.m

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9232676497295262
Encrypted:	false
SSDEEP:	3:SQTWAEVtGbSHaqHGDTzoARPkBDF:SQyANeayyTzTP6
MD5:	5BFBCC6E7AA3E9C1570C5C73F38FA8EA
SHA1:	497BAFA5658C6CE8C8010D12F104EEBEC7A1BAE2
SHA-256:	84470096167EA43C0880B39FE44B42F552014E4F85B66805C2935C542BA3CB8E
SHA-512:	41BBED6CC317FF190189D63D6D5910D30E23A5160E5FF5F635FF408AAB13452DA8174556D7120DB176701435A3329A93A7450583404D56C34A37B67F1A332EDC
Malicious:	false
Preview:	1.567f5df81ea0c9bdcfb7221f0ea091893150f8c16e3012e4f0314ba3d43f1632

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1001
Entropy (8bit):	4.774546324439748
Encrypted:	false
SSDEEP:	24:ulaihI11X1TRuRckckH3WoA0UNqLQxUNqmTxyNq+TA:C1hYl1uRfckHkseDA
MD5:	2FF237ADBC218A4934A8B361BCD3428E
SHA1:	EFAD279269D9372DCF9C65B8527792E2E9E6CA7D
SHA-256:	25A702DD5389CC7B077C6B4E06C1FAD9BDEA74A9C37453388986D093C277D827
SHA-512:	BAFD91699019AB756ADF13633B825D9D9BAE374CA146E8C05ABC70C931D491D421268A6E6549A8D284782898BC6EB99E3017FBE3A98E09CD3DFECAD19F95E542
Malicious:	false
Preview:	{. "manifest_version": 2,. "update_url": "https://clients2.google.com/service/update2/crx",. "name": "WidevineCdm",. "description": "Widevine Content Decryption Module",. "version": "4.10.2830.0",. "minimum_chrome_version": "68.0.3430.0",. "x-cdm-module-versions": "4",. "x-cdm-interface-versions": "10",. "x-cdm-host-versions": "10",. "x-cdm-codecs": "vp8,vp09,avc1,av01",. "x-cdm-persistent-license-support": true,. "x-cdm-supported-encryption-schemes": [. "cenc",. "cbcs". ],. "icons": {. "16": "imgs/icon-128x128.png",. "128": "imgs/icon-128x128.png". },. "platforms": [. {. "os": "win",. "arch": "x64",. "sub_package_path": "_platform_specific/win_x64/". },. {. "os": "win",. "arch": "x86",. "sub_package_path": "_platform_specific/win_x86/". },. {. "os": "win",. "arch": "arm64",. "sub_package_path": "_platform_specific/win_arm64/". }. ],. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Static File Info

General

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	5.594507904186386
TrID:	HyperText Markup Language (15015/1) 20.56% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (11501/1) 15.75% HyperText Markup Language (11501/1) 15.75%
File name:	DRL-272112.htm
File size:	561 bytes
MD5:	81dc3a960be379710e3a6cc44ca2d4cc
SHA1:	6d309bc8392bd0ac83e2501dbcc5bc04c0c0c266
SHA256:	e14b264dabe8576cd12616f63260ee69deff37f29556e72018642a531f861d8b
SHA512:	647d1d62933308865f32a3f99da19dfdc5558a9c55dacf33202883c9dbebb9db0875c3ef828f5545f9b855e369109e91c0a0590ba31b1c496878f4f24eab52fd
SSDEEP:	12:hPEhkACy7C/bB/fEi5mn1+iTcA2Qp/KvK7fWxoeaYD5MCLf44FOGb:hPRCwUi5XwcA3p/QMMawMCM4FF
TLSH:	58F0C0FA16E1584843F042349CC2F08DF9979A2F5B490F0A76D8A16B0FA43798DD71C8
File Content Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Detail notification for https://zoom.us/signin?continue=https%3A%2F%2Fdocs.zoom.us%2F&_x_zm_rtaid

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-17T11:32:09.703111+0200	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.4	49741	TCP
2024-10-17T11:32:48.187618+0200	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.4	49753	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 17, 2024 11:31:54.833791971 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 17, 2024 11:31:59.015620947 CEST	49737	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:31:59.015655994 CEST	443	49737	142.250.185.196	192.168.2.4
Oct 17, 2024 11:31:59.015760899 CEST	49737	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:31:59.015995026 CEST	49737	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:31:59.016009092 CEST	443	49737	142.250.185.196	192.168.2.4
Oct 17, 2024 11:31:59.723443031 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:31:59.723488092 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 17, 2024 11:31:59.723582983 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:31:59.726391077 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:31:59.726399899 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 17, 2024 11:31:59.882925034 CEST	443	49737	142.250.185.196	192.168.2.4
Oct 17, 2024 11:31:59.883223057 CEST	49737	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:31:59.883243084 CEST	443	49737	142.250.185.196	192.168.2.4
Oct 17, 2024 11:31:59.884471893 CEST	443	49737	142.250.185.196	192.168.2.4
Oct 17, 2024 11:31:59.884552002 CEST	49737	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:31:59.885586977 CEST	49737	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:31:59.885653019 CEST	443	49737	142.250.185.196	192.168.2.4
Oct 17, 2024 11:31:59.926162958 CEST	49737	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:31:59.926182032 CEST	443	49737	142.250.185.196	192.168.2.4
Oct 17, 2024 11:31:59.972827911 CEST	49737	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:32:00.574408054 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:00.574506998 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:00.578212023 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:00.578223944 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:00.578444004 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:00.623689890 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:00.671427011 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:00.871535063 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:00.871583939 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:00.871644974 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:00.871819973 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:00.871834993 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:00.871846914 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:00.871851921 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:00.916098118 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:00.916146994 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:00.916224003 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:00.916513920 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:00.916544914 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:01.782826900 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:01.782919884 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:01.784147978 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:01.784162045 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:01.784403086 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:01.785804987 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:01.831429958 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:02.037906885 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:02.037972927 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:02.038064003 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:02.038991928 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:02.039016962 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:02.039028883 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 17, 2024 11:32:02.039035082 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 17, 2024 11:32:07.101409912 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 17, 2024 11:32:07.101471901 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 17, 2024 11:32:07.796175957 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:07.796228886 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:07.796518087 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:07.806128979 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:07.806163073 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:08.689249992 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:08.689332962 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:08.692770004 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:08.692795038 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:08.693134069 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:08.738486052 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:09.407186985 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:09.451406002 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:09.702214956 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:09.702246904 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:09.702254057 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:09.702264071 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:09.702291012 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:09.702317953 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:09.702347994 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:09.702363014 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:09.702389956 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:09.702478886 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:09.702529907 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:09.702538013 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:09.703022957 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:09.703075886 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:09.865322113 CEST	443	49737	142.250.185.196	192.168.2.4
Oct 17, 2024 11:32:09.865411043 CEST	443	49737	142.250.185.196	192.168.2.4
Oct 17, 2024 11:32:09.865473986 CEST	49737	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:32:10.334758043 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:10.334790945 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:10.334827900 CEST	49741	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:10.334835052 CEST	443	49741	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:11.490592003 CEST	49737	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:32:11.490611076 CEST	443	49737	142.250.185.196	192.168.2.4
Oct 17, 2024 11:32:11.884368896 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 17, 2024 11:32:11.889699936 CEST	80	49723	199.232.210.172	192.168.2.4
Oct 17, 2024 11:32:11.889758110 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 17, 2024 11:32:46.829765081 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:46.829873085 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:46.829953909 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:46.830306053 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:46.830342054 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:47.731607914 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:47.731702089 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:47.739573956 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:47.739605904 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:47.740433931 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:47.775456905 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:47.823441982 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:48.064780951 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:48.064842939 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:48.064897060 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:48.064924955 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:48.064929008 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:48.065002918 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:48.065047026 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:48.065047026 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:48.065078020 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:48.187196016 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:48.187302113 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:48.187304974 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:48.187352896 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:48.187381983 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:48.187457085 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:48.187556028 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:48.201287031 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:48.201342106 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:48.201363087 CEST	49753	443	192.168.2.4	20.12.23.50
Oct 17, 2024 11:32:48.201375961 CEST	443	49753	20.12.23.50	192.168.2.4
Oct 17, 2024 11:32:48.408571005 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:48.408636093 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:48.408706903 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:48.408981085 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:48.409003019 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.189383984 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.189475060 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.196576118 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.196610928 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.197026014 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.212861061 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.259414911 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.474426985 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.474453926 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.474539042 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.474541903 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.474608898 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.474649906 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.474673033 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.599843979 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.599864960 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.599961996 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.600044012 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.600086927 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.600111961 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.727694035 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.727765083 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.727813959 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.727909088 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.727952003 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.727976084 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.849550962 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.849576950 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.849675894 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.849775076 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.849834919 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.977385044 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.977416992 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.977497101 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.977579117 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:49.977623940 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:49.977648020 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.100347042 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.100377083 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.100450039 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.100548029 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.100594044 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.100615978 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.224848986 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.224890947 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.224953890 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.225019932 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.225055933 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.225080013 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.349814892 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.349858999 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.349920988 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.350003958 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.350064993 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.350152016 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.351893902 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.351918936 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.351978064 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.351994038 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.352025032 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.352062941 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.665115118 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.665131092 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.665184021 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.665235043 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.665306091 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.665342093 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.665538073 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.666785002 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.666809082 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.666898012 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.666913986 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.666985989 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.727030993 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.727060080 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.727137089 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.727166891 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.727219105 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.729022026 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.729059935 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.729105949 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.729120016 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.729177952 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.729177952 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.810556889 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.810645103 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.810661077 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.810729980 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.810832024 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.810832024 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.810889006 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.810913086 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.859544992 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.859587908 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.859699965 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.859932899 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.859955072 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.862050056 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.862108946 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.862273932 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.862387896 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.862405062 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.863022089 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.863126993 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.863265991 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.863876104 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.863912106 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.864864111 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.864902973 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.864979982 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.865140915 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.865164042 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.866420984 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.866445065 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:50.866514921 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.866677999 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:50.866698027 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.644344091 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.644865036 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.644882917 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.645355940 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.645360947 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.657943010 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.658499002 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.658566952 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.658970118 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.658983946 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.660406113 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.660877943 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.660919905 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.661245108 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.661253929 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.666737080 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.667067051 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.667097092 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.667449951 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.667458057 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.673300982 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.673751116 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.673798084 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.674115896 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.674130917 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.775779009 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.775805950 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.775887012 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.775960922 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.775960922 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.776216984 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.776216984 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.776237965 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.776246071 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.779110909 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.779208899 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.779301882 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.779490948 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.779514074 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.787166119 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.787228107 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.787305117 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.787349939 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.787426949 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.787516117 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.787563086 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.787600040 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.787616014 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.789351940 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.789411068 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.789501905 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.789527893 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.789604902 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.789638996 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.789678097 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.789947987 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.790046930 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.790321112 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.790712118 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.790764093 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.790841103 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.791002989 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.791030884 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.791729927 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.791749001 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.792009115 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.792174101 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.792197943 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.802433968 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.802757025 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.802824974 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.802944899 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.802974939 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.803002119 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.803014994 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.804966927 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.805001020 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.805113077 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.805248022 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.805274963 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.820437908 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.820503950 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.820605993 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.820674896 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.820699930 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.820723057 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.820734024 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.822849035 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.822880030 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:51.823154926 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.823229074 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:51.823235989 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.824270010 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.824810982 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.824872971 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.825206041 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.825268030 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.825284958 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.825604916 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.825625896 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.825655937 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.825917006 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.825931072 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.826157093 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.826164007 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.826481104 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.826492071 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.831495047 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.831867933 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.831927061 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.832282066 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.832294941 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.835546970 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.835923910 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.835932970 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.836321115 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.836328983 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.956964970 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.957050085 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.957118988 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.957329988 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.957382917 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.957417011 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.957432985 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.959912062 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.960141897 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.960197926 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.960197926 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.960278034 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.960284948 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.960355043 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.960382938 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.960413933 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.960427999 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.960530043 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.960545063 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.960879087 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.961014032 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.961078882 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.961144924 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.961144924 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.961167097 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.961177111 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.962836027 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.962850094 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.962969065 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.963201046 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.963211060 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.963716984 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.963749886 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.963951111 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.963951111 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.963974953 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.967506886 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.967654943 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.967717886 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.967809916 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.967809916 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.967856884 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.967885017 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.968880892 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.968992949 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.969075918 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.969222069 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.969222069 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.969239950 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.969260931 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.970222950 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.970326900 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.970412016 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.970622063 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.970655918 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.971303940 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.971338987 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:52.971394062 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.971520901 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:52.971534967 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.731555939 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.732686996 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.732724905 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.733674049 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.733994007 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.734003067 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.734618902 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.734641075 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.735657930 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.735662937 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.740040064 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.740586996 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.740600109 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.741266966 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.741274118 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.742412090 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.742571115 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.743268013 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.743308067 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.744303942 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.744314909 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.744493961 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.744524956 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.745321989 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.745331049 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.874527931 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.874619961 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.874696016 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.874715090 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.874764919 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.874989986 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.875010967 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.875027895 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.875027895 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.875041962 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.875611067 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.875787020 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.875833035 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.876399040 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.876405001 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.877670050 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.877697945 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.878043890 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.878051996 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.879153967 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.879215956 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.879285097 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.879790068 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.879808903 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.879822969 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.879829884 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.880695105 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.880896091 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.880944014 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.881232023 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.881247044 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.881257057 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.881262064 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.884490967 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.884512901 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.884766102 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.885587931 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.885600090 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.887787104 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.887811899 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.888616085 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.888637066 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.888644934 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.888685942 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.889069080 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.889080048 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.890161037 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.890204906 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.890335083 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.890646935 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.890656948 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.891454935 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.891465902 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.891617060 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.891813040 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.891827106 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:53.892025948 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:53.892038107 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.651987076 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.652436972 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.652471066 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.652857065 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.652916908 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.652930021 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.653134108 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.653157949 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.653480053 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.653486967 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.661153078 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.661571980 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.661601067 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.662039042 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.662046909 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.662919044 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.663249016 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.663259029 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.663656950 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.663661957 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.664031029 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.665015936 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.665045977 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.665396929 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.665407896 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.786171913 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.786405087 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.786473989 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.786531925 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.786556005 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.786571980 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.786580086 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.789156914 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.789366007 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.789401054 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.789460897 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.789490938 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.789622068 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.789630890 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.789637089 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.789693117 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.789709091 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.789729118 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.789741039 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.791893005 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.791927099 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.792185068 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.792334080 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.792351007 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.798049927 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.798120022 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.798192024 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.798312902 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.798312902 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.798355103 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.798398018 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.800164938 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.800283909 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.800327063 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.800446033 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.800461054 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.800477982 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.800483942 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.801393986 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.801424980 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.801477909 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.801589012 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.801614046 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.803056002 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.803069115 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.803123951 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.803229094 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.803247929 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.811187029 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.811729908 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.811779976 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.811846972 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.811846972 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.811866045 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.811878920 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.813710928 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.813728094 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:54.814023018 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.814141989 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:54.814152002 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.595022917 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.595958948 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.595993042 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.596010923 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.596642971 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.596729040 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.596751928 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.597043991 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.597054958 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.597640038 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.597662926 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.599232912 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.599239111 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.600013971 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.600029945 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.601717949 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.601725101 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.601905107 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.601914883 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.603226900 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.603235960 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.603928089 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.603944063 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.604739904 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.604746103 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.734304905 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.734704018 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.734767914 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.734859943 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.734886885 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.734895945 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.734904051 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.737612963 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.737857103 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.737920046 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.738169909 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.738183975 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.738202095 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.738207102 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.738210917 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.738631010 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.738702059 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.739243031 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.739327908 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.739376068 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.740367889 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.740380049 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.740394115 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.740401030 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.741995096 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.742089033 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.742125988 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.742403984 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.742430925 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.742459059 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.742468119 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.745554924 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.745554924 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.745564938 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.745577097 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.752299070 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.752372026 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.752439976 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.778774023 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.778817892 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.784894943 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.784929037 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.785032034 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.785327911 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.785345078 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.786030054 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.786088943 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.786150932 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.788342953 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.788393974 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.788455009 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.790122032 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.790150881 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.790222883 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.790388107 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.790407896 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.790586948 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.790612936 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:55.790781975 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:55.790793896 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.549587965 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.550214052 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.550245047 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.551501989 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.551651001 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.551664114 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.553198099 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.553222895 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.554140091 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.554150105 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.575606108 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.576190948 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.576210022 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.576852083 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.576859951 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.578881025 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.579478979 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.579509974 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.580324888 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.580333948 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.580528021 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.581427097 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.581445932 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.582815886 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.582823992 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.683706999 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.683995008 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.684055090 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.687813044 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.687886953 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.687936068 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.704539061 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.704596043 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.704616070 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.704626083 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.706775904 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.706799984 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.716101885 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.717897892 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.717977047 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.718619108 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.718656063 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.718688011 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.718725920 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.718772888 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.718795061 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.720902920 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.720927000 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.720961094 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.720973015 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.724322081 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.724339962 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.724358082 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.724368095 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.726968050 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.726988077 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.727000952 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.727006912 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.734961033 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.734991074 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.735073090 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.735891104 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.735944033 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.735997915 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.738116026 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.738126993 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.739463091 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.739492893 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.743613958 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.743659973 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.743887901 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.744070053 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.744082928 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.745978117 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.746016979 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.746117115 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.746146917 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.746160984 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.746222973 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.746511936 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.746527910 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:56.746587038 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:56.746598959 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.493388891 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.493884087 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.493913889 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.494380951 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.494388103 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.511178017 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.511601925 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.511624098 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.511677980 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.512029886 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.512036085 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.512301922 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.512309074 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.512439013 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.512532949 CEST	60422	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:57.512748957 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.512753010 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.512816906 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.512862921 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.513221979 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.513231039 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.514069080 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.514698029 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.514698029 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.514720917 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.514734983 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.517334938 CEST	53	60422	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:57.517405987 CEST	60422	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:57.517456055 CEST	60422	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:57.522166014 CEST	53	60422	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:57.625320911 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.625540018 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.625591993 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.625618935 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.625631094 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.625644922 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.625650883 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.628369093 CEST	60423	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.628400087 CEST	443	60423	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.628616095 CEST	60423	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.628766060 CEST	60423	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.628777981 CEST	443	60423	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.640225887 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.641360044 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.641493082 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.641499043 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.641552925 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.641597986 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.641597986 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.641597986 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.641637087 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.641660929 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.641674995 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.641683102 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.641964912 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.642278910 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.642321110 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.642529964 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.642544031 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.642580032 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.642585993 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.644278049 CEST	60424	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.644311905 CEST	443	60424	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.644489050 CEST	60424	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.645339966 CEST	60425	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.645366907 CEST	443	60425	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.645601988 CEST	60425	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.645725965 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.645764112 CEST	60424	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.645781994 CEST	443	60424	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.645858049 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.645908117 CEST	60426	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.645906925 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.645919085 CEST	443	60426	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.645963907 CEST	60426	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.646164894 CEST	60425	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.646179914 CEST	443	60425	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.646256924 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.646270037 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.646328926 CEST	60426	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.646337986 CEST	443	60426	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.648263931 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.648272038 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.648279905 CEST	60427	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.648300886 CEST	443	60427	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.648371935 CEST	60427	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.648575068 CEST	60427	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.648587942 CEST	443	60427	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:57.941634893 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:57.941659927 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.118083954 CEST	53	60422	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:58.119242907 CEST	60422	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:58.124495029 CEST	53	60422	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:58.124551058 CEST	60422	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:58.365324974 CEST	443	60423	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.365858078 CEST	60423	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.365875959 CEST	443	60423	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.366424084 CEST	60423	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.366429090 CEST	443	60423	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.381063938 CEST	443	60427	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.381556034 CEST	60427	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.381581068 CEST	443	60427	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.382025957 CEST	60427	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.382035017 CEST	443	60427	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.382874012 CEST	443	60425	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.383276939 CEST	60425	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.383300066 CEST	443	60425	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.383740902 CEST	60425	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.383745909 CEST	443	60425	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.388988972 CEST	443	60424	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.389317989 CEST	60424	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.389333010 CEST	443	60424	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.389770985 CEST	60424	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.389780045 CEST	443	60424	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.396085024 CEST	443	60426	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.397080898 CEST	60426	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.397087097 CEST	443	60426	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.397768021 CEST	60426	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.397772074 CEST	443	60426	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.512135983 CEST	443	60427	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.512363911 CEST	443	60427	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.512430906 CEST	60427	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.514039993 CEST	60427	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.514105082 CEST	443	60427	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.514142990 CEST	60427	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.514158964 CEST	443	60427	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.515053988 CEST	443	60425	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.515115023 CEST	443	60425	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.515166998 CEST	60425	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.515366077 CEST	60425	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.515382051 CEST	443	60425	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.515403032 CEST	60425	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.515408993 CEST	443	60425	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.517566919 CEST	60431	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.517611980 CEST	443	60431	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.517662048 CEST	60431	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.517819881 CEST	60431	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.517831087 CEST	443	60431	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.518145084 CEST	60432	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.518176079 CEST	443	60432	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.518235922 CEST	60432	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.518332958 CEST	60432	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.518343925 CEST	443	60432	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.520479918 CEST	443	60424	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.520592928 CEST	443	60424	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.520647049 CEST	60424	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.520749092 CEST	60424	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.520767927 CEST	443	60424	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.520792961 CEST	60424	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.520803928 CEST	443	60424	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.522694111 CEST	60433	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.522716999 CEST	443	60433	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.522773027 CEST	60433	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.522947073 CEST	60433	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.522954941 CEST	443	60433	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.527364016 CEST	443	60426	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.527461052 CEST	443	60426	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.527503014 CEST	60426	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.527616978 CEST	60426	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.527621984 CEST	443	60426	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.527632952 CEST	60426	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.527637005 CEST	443	60426	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.529629946 CEST	60434	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.529639006 CEST	443	60434	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.529685020 CEST	60434	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.529917955 CEST	60434	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.529925108 CEST	443	60434	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.562141895 CEST	443	60423	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.562781096 CEST	443	60423	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.562836885 CEST	60423	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.562870979 CEST	60423	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.562880993 CEST	443	60423	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.562891960 CEST	60423	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.562896967 CEST	443	60423	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.565231085 CEST	60435	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.565279007 CEST	443	60435	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:58.565347910 CEST	60435	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.565501928 CEST	60435	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:58.565543890 CEST	443	60435	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.067985058 CEST	60436	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:32:59.068022966 CEST	443	60436	142.250.185.196	192.168.2.4
Oct 17, 2024 11:32:59.068094015 CEST	60436	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:32:59.068454981 CEST	60436	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:32:59.068469048 CEST	443	60436	142.250.185.196	192.168.2.4
Oct 17, 2024 11:32:59.236159086 CEST	443	60431	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.236757040 CEST	60431	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.236783981 CEST	443	60431	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.237215042 CEST	60431	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.237220049 CEST	443	60431	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.252927065 CEST	443	60433	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.253344059 CEST	60433	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.253359079 CEST	443	60433	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.253858089 CEST	60433	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.253861904 CEST	443	60433	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.266128063 CEST	443	60434	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.266508102 CEST	60434	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.266518116 CEST	443	60434	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.266932964 CEST	60434	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.266937017 CEST	443	60434	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.269354105 CEST	443	60432	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.269695044 CEST	60432	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.269714117 CEST	443	60432	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.270220041 CEST	60432	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.270226955 CEST	443	60432	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.292048931 CEST	443	60435	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.292484999 CEST	60435	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.292552948 CEST	443	60435	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.292922974 CEST	60435	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.292937994 CEST	443	60435	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.366940975 CEST	443	60431	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.367191076 CEST	443	60431	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.367278099 CEST	60431	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.367278099 CEST	60431	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.367443085 CEST	60431	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.367463112 CEST	443	60431	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.369959116 CEST	60437	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.369988918 CEST	443	60437	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.370055914 CEST	60437	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.370223045 CEST	60437	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.370234013 CEST	443	60437	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.384613991 CEST	443	60433	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.384722948 CEST	443	60433	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.384844065 CEST	60433	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.384871960 CEST	60433	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.384881973 CEST	443	60433	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.384896040 CEST	60433	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.384900093 CEST	443	60433	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.387592077 CEST	60438	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.387615919 CEST	443	60438	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.387741089 CEST	60438	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.387904882 CEST	60438	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.387916088 CEST	443	60438	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.395885944 CEST	443	60434	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.396114111 CEST	443	60434	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.396163940 CEST	60434	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.396208048 CEST	60434	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.396212101 CEST	443	60434	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.396223068 CEST	60434	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.396226883 CEST	443	60434	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.398737907 CEST	60439	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.398775101 CEST	443	60439	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.398873091 CEST	60439	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.398979902 CEST	60439	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.398992062 CEST	443	60439	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.402542114 CEST	443	60432	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.402667046 CEST	443	60432	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.402756929 CEST	60432	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.402756929 CEST	60432	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.402756929 CEST	60432	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.404807091 CEST	60440	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.404833078 CEST	443	60440	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.405019045 CEST	60440	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.405160904 CEST	60440	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.405170918 CEST	443	60440	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.422133923 CEST	443	60435	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.422370911 CEST	443	60435	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.422419071 CEST	60435	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.422487974 CEST	60435	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.422502995 CEST	443	60435	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.422514915 CEST	60435	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.422519922 CEST	443	60435	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.424752951 CEST	60441	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.424777985 CEST	443	60441	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.425096989 CEST	60441	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.425096989 CEST	60441	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.425118923 CEST	443	60441	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.629122972 CEST	60432	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:32:59.629153967 CEST	443	60432	13.107.246.45	192.168.2.4
Oct 17, 2024 11:32:59.950469971 CEST	443	60436	142.250.185.196	192.168.2.4
Oct 17, 2024 11:32:59.950790882 CEST	60436	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:32:59.950817108 CEST	443	60436	142.250.185.196	192.168.2.4
Oct 17, 2024 11:32:59.951134920 CEST	443	60436	142.250.185.196	192.168.2.4
Oct 17, 2024 11:32:59.955070019 CEST	60436	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:32:59.955142021 CEST	443	60436	142.250.185.196	192.168.2.4
Oct 17, 2024 11:33:00.004127026 CEST	60436	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:33:00.113719940 CEST	443	60437	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.114219904 CEST	60437	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.114234924 CEST	443	60437	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.114692926 CEST	60437	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.114697933 CEST	443	60437	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.118098021 CEST	443	60438	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.118413925 CEST	60438	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.118422985 CEST	443	60438	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.118788004 CEST	60438	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.118792057 CEST	443	60438	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.144763947 CEST	443	60439	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.145148039 CEST	60439	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.145173073 CEST	443	60439	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.145927906 CEST	60439	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.145934105 CEST	443	60439	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.151967049 CEST	443	60440	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.152307987 CEST	60440	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.152321100 CEST	443	60440	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.152698994 CEST	60440	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.152703047 CEST	443	60440	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.171005964 CEST	443	60441	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.171374083 CEST	60441	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.171392918 CEST	443	60441	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.171741009 CEST	60441	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.171746016 CEST	443	60441	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.245249033 CEST	443	60437	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.245394945 CEST	443	60437	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.246201038 CEST	443	60438	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.246262074 CEST	60437	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.246999979 CEST	443	60438	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.247051001 CEST	60438	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.247391939 CEST	60437	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.247406006 CEST	443	60437	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.247421026 CEST	60437	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.247427940 CEST	443	60437	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.247805119 CEST	60438	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.247809887 CEST	443	60438	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.247817039 CEST	60438	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.247821093 CEST	443	60438	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.250690937 CEST	60442	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.250715017 CEST	60443	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.250734091 CEST	443	60442	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.250746012 CEST	443	60443	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.250816107 CEST	60442	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.250951052 CEST	60443	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.251075983 CEST	60442	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.251086950 CEST	443	60442	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.251090050 CEST	60443	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.251099110 CEST	443	60443	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.275820017 CEST	443	60439	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.275908947 CEST	443	60439	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.276161909 CEST	60439	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.276163101 CEST	60439	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.276163101 CEST	60439	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.278985977 CEST	60444	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.279020071 CEST	443	60444	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.279247046 CEST	60444	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.279397011 CEST	60444	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.279406071 CEST	443	60444	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.283998966 CEST	443	60440	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.284105062 CEST	443	60440	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.284157038 CEST	60440	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.286098003 CEST	60440	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.286108017 CEST	443	60440	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.286118031 CEST	60440	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.286123037 CEST	443	60440	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.288253069 CEST	60445	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.288307905 CEST	443	60445	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.288383007 CEST	60445	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.288522005 CEST	60445	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.288537979 CEST	443	60445	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.301081896 CEST	443	60441	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.301273108 CEST	443	60441	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.301520109 CEST	60441	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.301520109 CEST	60441	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.301817894 CEST	60441	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.301827908 CEST	443	60441	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.303683043 CEST	60446	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.303699970 CEST	443	60446	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.303795099 CEST	60446	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.303894997 CEST	60446	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.303905964 CEST	443	60446	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.582241058 CEST	60439	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.582267046 CEST	443	60439	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.816772938 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 17, 2024 11:33:00.822148085 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 17, 2024 11:33:00.822206974 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 17, 2024 11:33:00.981337070 CEST	443	60442	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.983094931 CEST	60442	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.983110905 CEST	443	60442	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.983875036 CEST	60442	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:00.983881950 CEST	443	60442	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:00.992816925 CEST	443	60443	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.005251884 CEST	443	60444	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.028179884 CEST	60443	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.028239965 CEST	443	60443	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.028701067 CEST	60443	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.028714895 CEST	443	60443	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.034394026 CEST	60444	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.034411907 CEST	443	60444	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.034574032 CEST	443	60445	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.036235094 CEST	60444	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.036238909 CEST	443	60444	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.037071943 CEST	60445	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.037092924 CEST	443	60445	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.037848949 CEST	60445	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.037856102 CEST	443	60445	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.052617073 CEST	443	60446	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.053694010 CEST	60446	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.053703070 CEST	443	60446	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.054100990 CEST	60446	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.054105997 CEST	443	60446	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.110183001 CEST	443	60442	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.110241890 CEST	443	60442	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.110286951 CEST	60442	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.153630972 CEST	60442	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.153650999 CEST	443	60442	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.153799057 CEST	60442	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.153805971 CEST	443	60442	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.156701088 CEST	443	60443	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.157043934 CEST	443	60443	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.157115936 CEST	60443	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.159049034 CEST	60447	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.159073114 CEST	443	60447	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.159223080 CEST	60447	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.159379005 CEST	60443	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.159379005 CEST	60443	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.159435034 CEST	443	60443	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.159460068 CEST	443	60443	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.163578987 CEST	443	60444	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.163686991 CEST	60448	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.163696051 CEST	443	60448	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.163822889 CEST	60448	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.163947105 CEST	443	60444	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.163999081 CEST	60444	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.164216042 CEST	60447	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.164222956 CEST	443	60447	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.164932013 CEST	60444	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.164938927 CEST	443	60444	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.166471958 CEST	60448	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.166479111 CEST	443	60448	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.168946981 CEST	60449	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.168982029 CEST	443	60449	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.169068098 CEST	60449	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.169553041 CEST	60449	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.169564009 CEST	443	60449	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.171286106 CEST	443	60445	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.171488047 CEST	443	60445	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.171544075 CEST	60445	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.172173977 CEST	60445	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.172183990 CEST	443	60445	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.173969030 CEST	60450	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.173979044 CEST	443	60450	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.174066067 CEST	60450	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.174199104 CEST	60450	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.174211025 CEST	443	60450	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.185779095 CEST	443	60446	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.185832977 CEST	443	60446	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.185870886 CEST	60446	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.186036110 CEST	60446	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.186043024 CEST	443	60446	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.186069965 CEST	60446	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.186075926 CEST	443	60446	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.188163996 CEST	60451	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.188172102 CEST	443	60451	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.188359022 CEST	60451	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.188594103 CEST	60451	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.188601017 CEST	443	60451	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.968167067 CEST	443	60448	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.968663931 CEST	60448	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.968698025 CEST	443	60448	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.969136953 CEST	60448	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.969141960 CEST	443	60448	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.974124908 CEST	443	60450	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.974139929 CEST	443	60447	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.974488974 CEST	60450	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.974514961 CEST	443	60450	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.974837065 CEST	443	60449	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.975075006 CEST	443	60451	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.975214005 CEST	60450	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.975223064 CEST	443	60450	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.975502968 CEST	60447	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.975516081 CEST	443	60447	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.976190090 CEST	60447	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.976193905 CEST	443	60447	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.976449013 CEST	60449	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.976458073 CEST	443	60449	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.976634026 CEST	60451	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.976639986 CEST	443	60451	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.976918936 CEST	60449	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.976924896 CEST	443	60449	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:01.977030993 CEST	60451	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:01.977035046 CEST	443	60451	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.100557089 CEST	443	60448	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.100629091 CEST	443	60448	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.100692034 CEST	60448	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.100847960 CEST	60448	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.100866079 CEST	443	60448	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.100878000 CEST	60448	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.100883007 CEST	443	60448	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.103843927 CEST	60452	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.103934050 CEST	443	60452	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.104026079 CEST	60452	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.104187012 CEST	60452	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.104218960 CEST	443	60452	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.105818033 CEST	443	60447	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.106021881 CEST	443	60447	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.106069088 CEST	60447	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.106107950 CEST	60447	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.106111050 CEST	443	60447	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.106136084 CEST	60447	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.106141090 CEST	443	60447	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.108138084 CEST	60453	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.108187914 CEST	443	60453	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.108277082 CEST	60453	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.108438015 CEST	60453	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.108450890 CEST	443	60453	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.109307051 CEST	443	60451	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.109380960 CEST	443	60449	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.109391928 CEST	443	60451	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.109440088 CEST	60451	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.109481096 CEST	443	60449	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.109532118 CEST	60449	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.109579086 CEST	60449	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.109579086 CEST	60449	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.109603882 CEST	443	60449	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.109616041 CEST	443	60449	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.109642982 CEST	60451	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.109649897 CEST	443	60451	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.109677076 CEST	60451	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.109680891 CEST	443	60451	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.112098932 CEST	60454	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.112107992 CEST	443	60454	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.112164021 CEST	60455	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.112171888 CEST	60454	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.112232924 CEST	443	60455	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.112314939 CEST	60454	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.112318039 CEST	60455	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.112328053 CEST	443	60454	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.112405062 CEST	60455	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.112454891 CEST	443	60455	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.170727968 CEST	443	60450	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.170871019 CEST	443	60450	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.170969009 CEST	60450	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.170991898 CEST	60450	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.171000957 CEST	443	60450	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.171015978 CEST	60450	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.171022892 CEST	443	60450	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.173481941 CEST	60456	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.173511982 CEST	443	60456	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.173624992 CEST	60456	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.173723936 CEST	60456	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.173731089 CEST	443	60456	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.854947090 CEST	443	60454	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.855463028 CEST	60454	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.855482101 CEST	443	60454	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.855997086 CEST	60454	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.856002092 CEST	443	60454	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.866782904 CEST	443	60455	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.867232084 CEST	60455	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.867280006 CEST	443	60455	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.867643118 CEST	60455	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.867655993 CEST	443	60455	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.869839907 CEST	443	60452	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.870168924 CEST	60452	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.870187044 CEST	443	60452	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.870541096 CEST	60452	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.870552063 CEST	443	60452	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.915210009 CEST	443	60453	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.915766001 CEST	60453	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.915786982 CEST	443	60453	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.916321993 CEST	60453	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.916327953 CEST	443	60453	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.922795057 CEST	443	60456	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.923183918 CEST	60456	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.923202038 CEST	443	60456	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.923552990 CEST	60456	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.923558950 CEST	443	60456	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.985903025 CEST	443	60454	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.986094952 CEST	443	60454	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.986557007 CEST	60454	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.986742973 CEST	60454	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.986764908 CEST	443	60454	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.986774921 CEST	60454	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.986782074 CEST	443	60454	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.989427090 CEST	60457	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.989526987 CEST	443	60457	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.989619970 CEST	60457	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.989797115 CEST	60457	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.989820957 CEST	443	60457	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.997067928 CEST	443	60455	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.997425079 CEST	443	60455	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.997490883 CEST	60455	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.997548103 CEST	60455	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.997548103 CEST	60455	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.997590065 CEST	443	60455	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.997615099 CEST	443	60455	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.999794006 CEST	60458	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:02.999819994 CEST	443	60458	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:02.999989033 CEST	60458	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.000092030 CEST	60458	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.000113010 CEST	443	60458	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.001786947 CEST	443	60452	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.001946926 CEST	443	60452	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.002007008 CEST	60452	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.002048969 CEST	60452	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.002048969 CEST	60452	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.002067089 CEST	443	60452	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.002087116 CEST	443	60452	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.004295111 CEST	60459	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.004345894 CEST	443	60459	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.004420996 CEST	60459	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.004544973 CEST	60459	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.004558086 CEST	443	60459	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.049536943 CEST	443	60453	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.049882889 CEST	443	60453	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.049968004 CEST	60453	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.050002098 CEST	60453	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.050012112 CEST	443	60453	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.050035954 CEST	60453	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.050040960 CEST	443	60453	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.052342892 CEST	60460	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.052434921 CEST	443	60460	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.052586079 CEST	60460	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.052716017 CEST	60460	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.052751064 CEST	443	60460	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.055218935 CEST	443	60456	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.055329084 CEST	443	60456	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.055459023 CEST	60456	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.055483103 CEST	60456	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.055483103 CEST	60456	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.055496931 CEST	443	60456	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.055506945 CEST	443	60456	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.057404041 CEST	60461	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.057507992 CEST	443	60461	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.057610035 CEST	60461	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.057756901 CEST	60461	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.057791948 CEST	443	60461	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.741966963 CEST	443	60457	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.742533922 CEST	60457	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.742571115 CEST	443	60457	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.742991924 CEST	60457	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.743000031 CEST	443	60457	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.764046907 CEST	443	60458	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.764558077 CEST	60458	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.764570951 CEST	443	60458	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.764971972 CEST	60458	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.764976025 CEST	443	60458	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.778918982 CEST	443	60459	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.779356003 CEST	60459	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.779381990 CEST	443	60459	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.779794931 CEST	60459	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.779808998 CEST	443	60459	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.817523003 CEST	443	60460	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.818228006 CEST	60460	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.818308115 CEST	443	60460	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.818682909 CEST	60460	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.818697929 CEST	443	60460	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.833591938 CEST	443	60461	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.834276915 CEST	60461	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.834315062 CEST	443	60461	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.834656954 CEST	60461	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.834664106 CEST	443	60461	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.881129026 CEST	443	60457	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.881196022 CEST	443	60457	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.881413937 CEST	60457	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.881450891 CEST	60457	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.881469011 CEST	443	60457	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.881478071 CEST	60457	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.881484032 CEST	443	60457	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.884196043 CEST	60462	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.884246111 CEST	443	60462	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.884434938 CEST	60462	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.884579897 CEST	60462	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.884598970 CEST	443	60462	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.902827024 CEST	443	60458	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.902945995 CEST	443	60458	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.903008938 CEST	60458	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.903197050 CEST	60458	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.903212070 CEST	443	60458	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.903223991 CEST	60458	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.903228998 CEST	443	60458	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.905951023 CEST	60463	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.906001091 CEST	443	60463	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.906105995 CEST	60463	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.906280041 CEST	60463	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.906292915 CEST	443	60463	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.919159889 CEST	443	60459	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.919306993 CEST	443	60459	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.919415951 CEST	60459	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.919415951 CEST	60459	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.919514894 CEST	60459	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.919532061 CEST	443	60459	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.921803951 CEST	60464	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.921847105 CEST	443	60464	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.921909094 CEST	60464	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.922056913 CEST	60464	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.922074080 CEST	443	60464	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.952331066 CEST	443	60460	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.952578068 CEST	443	60460	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.952637911 CEST	60460	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.952675104 CEST	60460	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.952691078 CEST	443	60460	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.952702045 CEST	60460	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.952707052 CEST	443	60460	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.955296040 CEST	60465	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.955327988 CEST	443	60465	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.955413103 CEST	60465	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.955656052 CEST	60465	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.955665112 CEST	443	60465	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.966541052 CEST	443	60461	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.966746092 CEST	443	60461	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.966831923 CEST	60461	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.966870070 CEST	60461	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.966870070 CEST	60461	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.966887951 CEST	443	60461	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.966900110 CEST	443	60461	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.969064951 CEST	60466	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.969079971 CEST	443	60466	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:03.969202042 CEST	60466	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.969346046 CEST	60466	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:03.969353914 CEST	443	60466	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.637590885 CEST	443	60462	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.638139963 CEST	60462	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.638187885 CEST	443	60462	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.638609886 CEST	60462	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.638622046 CEST	443	60462	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.659743071 CEST	443	60463	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.660223961 CEST	60463	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.660319090 CEST	443	60463	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.660727978 CEST	60463	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.660746098 CEST	443	60463	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.664004087 CEST	443	60464	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.664531946 CEST	60464	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.664568901 CEST	443	60464	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.665067911 CEST	60464	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.665076017 CEST	443	60464	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.688246012 CEST	443	60465	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.688658953 CEST	60465	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.688685894 CEST	443	60465	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.689169884 CEST	60465	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.689174891 CEST	443	60465	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.722621918 CEST	443	60466	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.723290920 CEST	60466	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.723320961 CEST	443	60466	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.723777056 CEST	60466	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.723788023 CEST	443	60466	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.768836975 CEST	443	60462	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.768934965 CEST	443	60462	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.769006014 CEST	60462	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.769134998 CEST	60462	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.769154072 CEST	443	60462	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.769170046 CEST	60462	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.769176006 CEST	443	60462	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.771958113 CEST	60467	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.772013903 CEST	443	60467	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.772098064 CEST	60467	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.772254944 CEST	60467	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.772269011 CEST	443	60467	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.793590069 CEST	443	60463	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.793751001 CEST	443	60463	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.793831110 CEST	60463	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.793945074 CEST	60463	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.793945074 CEST	60463	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.793988943 CEST	443	60463	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.794015884 CEST	443	60463	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.794569016 CEST	443	60464	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.794639111 CEST	443	60464	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.794702053 CEST	60464	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.794917107 CEST	60464	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.794941902 CEST	443	60464	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.794951916 CEST	60464	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.794956923 CEST	443	60464	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.796835899 CEST	60468	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.796885967 CEST	443	60468	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.796972990 CEST	60468	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.797096968 CEST	60468	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.797111034 CEST	443	60468	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.797494888 CEST	60469	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.797543049 CEST	443	60469	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.797758102 CEST	60469	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.797909975 CEST	60469	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.797924995 CEST	443	60469	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.817141056 CEST	443	60465	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.817271948 CEST	443	60465	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.817329884 CEST	60465	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.817441940 CEST	60465	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.817441940 CEST	60465	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.817457914 CEST	443	60465	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.817467928 CEST	443	60465	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.819803953 CEST	60470	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.819835901 CEST	443	60470	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.819982052 CEST	60470	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.820116043 CEST	60470	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.820127010 CEST	443	60470	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.857335091 CEST	443	60466	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.857424974 CEST	443	60466	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.857526064 CEST	60466	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.858612061 CEST	60466	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.858633041 CEST	443	60466	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.860774040 CEST	60471	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.860801935 CEST	443	60471	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:04.860883951 CEST	60471	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.861435890 CEST	60471	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:04.861478090 CEST	443	60471	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.899399042 CEST	443	60467	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.899966955 CEST	60467	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:05.899997950 CEST	443	60467	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.900659084 CEST	60467	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:05.900666952 CEST	443	60467	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.904007912 CEST	443	60470	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.904455900 CEST	60470	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:05.904474974 CEST	443	60470	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.905045033 CEST	60470	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:05.905050039 CEST	443	60470	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.906301022 CEST	443	60471	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.906687021 CEST	60471	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:05.906719923 CEST	443	60471	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.907099009 CEST	60471	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:05.907104969 CEST	443	60471	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.907701969 CEST	443	60469	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.908113003 CEST	60469	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:05.908124924 CEST	443	60469	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.908477068 CEST	60469	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:05.908482075 CEST	443	60469	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.982944965 CEST	443	60468	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.983438969 CEST	60468	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:05.983465910 CEST	443	60468	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:05.983874083 CEST	60468	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:05.983879089 CEST	443	60468	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.039998055 CEST	443	60470	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.040019035 CEST	443	60470	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.040069103 CEST	443	60470	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.040087938 CEST	60470	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.040141106 CEST	60470	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.040256977 CEST	60470	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.040272951 CEST	443	60470	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.040282965 CEST	60470	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.040287971 CEST	443	60470	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.043042898 CEST	60472	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.043076992 CEST	443	60472	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.043184996 CEST	60472	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.043387890 CEST	60472	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.043397903 CEST	443	60472	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.053400993 CEST	443	60469	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.054174900 CEST	443	60469	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.054246902 CEST	60469	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.054327011 CEST	60469	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.054335117 CEST	443	60469	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.054347992 CEST	60469	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.054352045 CEST	443	60469	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.057279110 CEST	60473	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.057374001 CEST	443	60473	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.057646036 CEST	60473	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.057823896 CEST	60473	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.057854891 CEST	443	60473	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.058046103 CEST	443	60471	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.058094978 CEST	443	60471	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.058161020 CEST	60471	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.058182001 CEST	443	60471	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.058221102 CEST	60471	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.058229923 CEST	443	60471	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.058286905 CEST	60471	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.058470964 CEST	60471	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.058484077 CEST	443	60471	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.058511019 CEST	60471	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.058516026 CEST	443	60471	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.060926914 CEST	60474	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.060950994 CEST	443	60474	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.061027050 CEST	60474	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.061130047 CEST	60474	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.061141014 CEST	443	60474	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.111052036 CEST	443	60467	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.111083984 CEST	443	60467	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.111139059 CEST	60467	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.111171007 CEST	443	60467	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.111234903 CEST	443	60467	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.111347914 CEST	60467	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.111560106 CEST	60467	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.111560106 CEST	60467	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.111579895 CEST	443	60467	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.111589909 CEST	443	60467	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.115493059 CEST	60475	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.115536928 CEST	443	60475	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.115693092 CEST	60475	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.116060972 CEST	60475	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.116077900 CEST	443	60475	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.116290092 CEST	443	60468	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.116437912 CEST	443	60468	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.116482973 CEST	60468	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.116633892 CEST	60468	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.116647005 CEST	443	60468	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.116692066 CEST	60468	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.116698027 CEST	443	60468	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.120174885 CEST	60476	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.120203018 CEST	443	60476	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.120532036 CEST	60476	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.120724916 CEST	60476	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.120737076 CEST	443	60476	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.798090935 CEST	443	60472	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.798716068 CEST	60472	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.798749924 CEST	443	60472	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.799146891 CEST	60472	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.799154043 CEST	443	60472	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.827675104 CEST	443	60474	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.828170061 CEST	60474	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.828238010 CEST	443	60474	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.828486919 CEST	443	60473	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.828639984 CEST	60474	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.828655958 CEST	443	60474	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.828869104 CEST	60473	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.828885078 CEST	443	60473	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.829349041 CEST	60473	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.829359055 CEST	443	60473	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.856287003 CEST	443	60476	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.857084990 CEST	60476	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.857116938 CEST	443	60476	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.857954025 CEST	60476	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.857959986 CEST	443	60476	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.859246969 CEST	443	60475	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.859896898 CEST	60475	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.859931946 CEST	443	60475	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.860632896 CEST	60475	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.860647917 CEST	443	60475	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.927767992 CEST	443	60472	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.927845001 CEST	443	60472	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.927983046 CEST	443	60472	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.927999973 CEST	60472	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.928040028 CEST	60472	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.928184032 CEST	60472	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.928206921 CEST	443	60472	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.928220987 CEST	60472	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.928226948 CEST	443	60472	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.933934927 CEST	60477	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.933970928 CEST	443	60477	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.934032917 CEST	60477	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.934505939 CEST	60477	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.934525013 CEST	443	60477	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.960783005 CEST	443	60473	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.961533070 CEST	443	60473	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.961607933 CEST	60473	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.961738110 CEST	60473	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.961785078 CEST	443	60473	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.961817026 CEST	60473	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.961816072 CEST	443	60474	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.961833954 CEST	443	60473	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.961925983 CEST	443	60474	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.961982965 CEST	60474	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.964459896 CEST	60474	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.964504957 CEST	443	60474	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.964541912 CEST	60474	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.964555979 CEST	443	60474	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.970489025 CEST	60478	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.970513105 CEST	443	60478	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.970608950 CEST	60478	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.972223997 CEST	60479	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.972259998 CEST	443	60479	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.972332001 CEST	60479	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.972673893 CEST	60478	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.972691059 CEST	443	60478	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.973026991 CEST	60479	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.973040104 CEST	443	60479	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.983644962 CEST	443	60476	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.983808041 CEST	443	60476	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.983864069 CEST	60476	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.984026909 CEST	60476	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.984036922 CEST	443	60476	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.984050989 CEST	60476	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.984055042 CEST	443	60476	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.987200022 CEST	60480	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.987235069 CEST	443	60480	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.987703085 CEST	60480	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.988034010 CEST	60480	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.988049984 CEST	443	60480	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.989202976 CEST	443	60475	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.989263058 CEST	443	60475	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.989319086 CEST	60475	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.989715099 CEST	60475	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.989727020 CEST	443	60475	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.989738941 CEST	60475	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.989743948 CEST	443	60475	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.994426012 CEST	60481	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.994473934 CEST	443	60481	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:06.994529963 CEST	60481	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.994800091 CEST	60481	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:06.994834900 CEST	443	60481	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.674572945 CEST	443	60477	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.675234079 CEST	60477	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.675252914 CEST	443	60477	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.675900936 CEST	60477	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.675909996 CEST	443	60477	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.725145102 CEST	443	60479	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.725531101 CEST	443	60478	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.737432957 CEST	443	60481	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.742723942 CEST	443	60480	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.751435041 CEST	60479	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.751463890 CEST	443	60479	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.752234936 CEST	60479	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.752240896 CEST	443	60479	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.752643108 CEST	60478	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.752665043 CEST	443	60478	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.753134966 CEST	60478	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.753151894 CEST	443	60478	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.753725052 CEST	60481	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.753801107 CEST	443	60481	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.754268885 CEST	60481	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.754282951 CEST	443	60481	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.754688025 CEST	60480	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.754713058 CEST	443	60480	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.759584904 CEST	60480	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.759591103 CEST	443	60480	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.802181959 CEST	443	60477	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.802330017 CEST	443	60477	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.802401066 CEST	60477	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.825357914 CEST	60477	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.825393915 CEST	443	60477	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.825408936 CEST	60477	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.825418949 CEST	443	60477	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.829474926 CEST	60482	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.829559088 CEST	443	60482	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.829631090 CEST	60482	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.829801083 CEST	60482	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.829821110 CEST	443	60482	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.879959106 CEST	443	60479	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.880115986 CEST	443	60479	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.880182981 CEST	60479	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.880357027 CEST	60479	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.880378008 CEST	443	60479	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.880394936 CEST	60479	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.880400896 CEST	443	60479	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.880690098 CEST	443	60478	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.880841970 CEST	443	60478	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.880951881 CEST	60478	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.880980015 CEST	60478	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.881004095 CEST	443	60478	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.881012917 CEST	60478	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.881019115 CEST	443	60478	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.881071091 CEST	443	60481	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.881148100 CEST	443	60481	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.881196976 CEST	60481	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.881573915 CEST	60481	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.881597996 CEST	443	60481	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.881650925 CEST	60481	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.881668091 CEST	443	60481	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.884157896 CEST	60483	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.884192944 CEST	60484	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.884216070 CEST	443	60484	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.884246111 CEST	443	60483	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.884298086 CEST	60484	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.884330034 CEST	60483	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.884445906 CEST	60484	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.884460926 CEST	443	60484	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.884543896 CEST	60483	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.884577990 CEST	443	60483	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.885073900 CEST	60485	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.885096073 CEST	443	60485	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.885166883 CEST	60485	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.885270119 CEST	60485	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.885283947 CEST	443	60485	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.888870955 CEST	443	60480	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.888945103 CEST	443	60480	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.889007092 CEST	60480	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.889120102 CEST	60480	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.889120102 CEST	60480	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.889158964 CEST	443	60480	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.889180899 CEST	443	60480	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.890939951 CEST	60486	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.890950918 CEST	443	60486	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:07.891016006 CEST	60486	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.891180992 CEST	60486	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:07.891191959 CEST	443	60486	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.587426901 CEST	443	60482	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.591169119 CEST	60482	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.591204882 CEST	443	60482	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.591840982 CEST	60482	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.591854095 CEST	443	60482	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.620018005 CEST	443	60483	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.628026962 CEST	443	60485	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.633357048 CEST	443	60486	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.633740902 CEST	60483	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.633775949 CEST	443	60483	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.635140896 CEST	60483	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.635152102 CEST	443	60483	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.636159897 CEST	60485	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.636177063 CEST	443	60485	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.637828112 CEST	443	60484	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.643177032 CEST	60485	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.643203020 CEST	443	60485	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.664729118 CEST	60484	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.664771080 CEST	443	60484	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.665221930 CEST	60484	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.665230036 CEST	443	60484	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.677012920 CEST	60486	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.723186970 CEST	443	60482	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.723257065 CEST	443	60482	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.723450899 CEST	60482	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.764974117 CEST	443	60483	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.765146017 CEST	443	60483	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.765212059 CEST	60483	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.774931908 CEST	443	60485	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.775003910 CEST	443	60485	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.775121927 CEST	443	60485	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.775181055 CEST	60485	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.798571110 CEST	443	60484	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.798604012 CEST	443	60484	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.798655987 CEST	443	60484	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.798664093 CEST	60484	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.798752069 CEST	60484	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.800843954 CEST	60486	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.800843954 CEST	60486	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.800862074 CEST	443	60486	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.800885916 CEST	443	60486	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.801079035 CEST	60484	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.801079035 CEST	60484	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:08.801103115 CEST	443	60484	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.801114082 CEST	443	60484	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.930500984 CEST	443	60486	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.930639029 CEST	443	60486	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:08.930780888 CEST	60486	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.035444021 CEST	60482	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.035479069 CEST	443	60482	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.037116051 CEST	60483	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.037153959 CEST	443	60483	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.037187099 CEST	60483	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.037194967 CEST	443	60483	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.038368940 CEST	60485	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.038392067 CEST	443	60485	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.038796902 CEST	60485	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.038806915 CEST	443	60485	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.040414095 CEST	60486	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.040436983 CEST	443	60486	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.041906118 CEST	60486	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.041914940 CEST	443	60486	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.044703960 CEST	60487	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.044750929 CEST	443	60487	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.044975996 CEST	60487	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.045876026 CEST	60488	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.045916080 CEST	443	60488	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.046049118 CEST	60488	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.047100067 CEST	60487	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.047112942 CEST	443	60487	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.047286987 CEST	60488	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.047298908 CEST	443	60488	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.048666954 CEST	60489	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.048698902 CEST	443	60489	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.048928022 CEST	60489	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.049118042 CEST	60489	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.049129009 CEST	443	60489	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.049877882 CEST	60490	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.049886942 CEST	443	60490	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.049942017 CEST	60490	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.050590992 CEST	60490	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.050601006 CEST	443	60490	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.051075935 CEST	60491	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.051084995 CEST	443	60491	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.051137924 CEST	60491	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.051317930 CEST	60491	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.051326990 CEST	443	60491	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.778825998 CEST	443	60489	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.779366016 CEST	60489	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.779378891 CEST	443	60489	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.779846907 CEST	60489	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.779853106 CEST	443	60489	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.780208111 CEST	443	60488	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.780564070 CEST	60488	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.780586958 CEST	443	60488	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.780960083 CEST	60488	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.780967951 CEST	443	60488	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.781433105 CEST	443	60491	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.781747103 CEST	60491	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.781758070 CEST	443	60491	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.782130957 CEST	60491	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.782136917 CEST	443	60491	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.788992882 CEST	443	60487	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.790024996 CEST	60487	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.790047884 CEST	443	60487	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.791357994 CEST	60487	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.791363955 CEST	443	60487	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.800597906 CEST	443	60490	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.803409100 CEST	60490	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.803427935 CEST	443	60490	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.804610014 CEST	60490	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.804617882 CEST	443	60490	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.908865929 CEST	443	60489	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.908931971 CEST	443	60489	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.908989906 CEST	60489	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.910161018 CEST	443	60491	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.910394907 CEST	443	60491	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.910449982 CEST	60491	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.910475969 CEST	443	60488	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.910480976 CEST	443	60491	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.910540104 CEST	443	60491	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.910588026 CEST	60491	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.910646915 CEST	443	60488	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.910693884 CEST	60488	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.922003031 CEST	443	60487	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.922070026 CEST	443	60487	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.922127008 CEST	60487	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.922813892 CEST	60491	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.922837019 CEST	443	60491	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.925398111 CEST	60489	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.925424099 CEST	443	60489	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.927937031 CEST	60488	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.927948952 CEST	443	60488	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.927963972 CEST	60488	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.927970886 CEST	443	60488	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.931351900 CEST	60487	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.931351900 CEST	60487	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.931392908 CEST	443	60487	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.931405067 CEST	443	60487	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.933326006 CEST	443	60490	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.933398962 CEST	443	60490	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.933443069 CEST	60490	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.934612989 CEST	60490	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.934612989 CEST	60490	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.934628963 CEST	443	60490	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.934658051 CEST	443	60490	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.943398952 CEST	60492	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.943444014 CEST	443	60492	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.943515062 CEST	60492	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.946427107 CEST	60493	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.946477890 CEST	443	60493	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.946604967 CEST	60493	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.947534084 CEST	60494	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.947544098 CEST	443	60494	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.947601080 CEST	60494	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.950989008 CEST	60495	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.951004982 CEST	443	60495	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.951057911 CEST	60495	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.951899052 CEST	60492	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.951911926 CEST	443	60492	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.951972961 CEST	60493	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.951992035 CEST	443	60493	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.952142954 CEST	60494	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.952152967 CEST	443	60494	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.952733040 CEST	60496	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.952760935 CEST	443	60496	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.952810049 CEST	60496	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.953145027 CEST	60496	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.953161001 CEST	443	60496	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.953644991 CEST	60495	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:09.953661919 CEST	443	60495	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:09.962281942 CEST	443	60436	142.250.185.196	192.168.2.4
Oct 17, 2024 11:33:09.962449074 CEST	443	60436	142.250.185.196	192.168.2.4
Oct 17, 2024 11:33:09.962498903 CEST	60436	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:33:10.734850883 CEST	443	60494	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.734910011 CEST	443	60492	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.735367060 CEST	60492	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.735368013 CEST	60494	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.735393047 CEST	443	60492	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.735395908 CEST	443	60494	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.735902071 CEST	443	60495	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.735934973 CEST	60494	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.735941887 CEST	443	60494	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.736267090 CEST	443	60496	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.736639977 CEST	60492	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.736639977 CEST	60495	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.736650944 CEST	443	60492	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.736663103 CEST	443	60495	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.737143993 CEST	60495	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.737149954 CEST	443	60495	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.737665892 CEST	60496	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.737665892 CEST	60496	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.737699032 CEST	443	60496	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.737708092 CEST	443	60496	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.739434004 CEST	443	60493	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.739891052 CEST	60493	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.739907026 CEST	443	60493	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.740858078 CEST	60493	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.740864038 CEST	443	60493	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.863662004 CEST	443	60494	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.864177942 CEST	443	60494	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.864274025 CEST	60494	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.864301920 CEST	60494	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.864303112 CEST	60494	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.864320040 CEST	443	60494	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.864330053 CEST	443	60494	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.867202044 CEST	60497	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.867242098 CEST	443	60497	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.867692947 CEST	60497	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.867693901 CEST	60497	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.867721081 CEST	443	60492	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.867722988 CEST	443	60497	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.867746115 CEST	443	60492	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.867784023 CEST	443	60492	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.867811918 CEST	60492	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.867943048 CEST	60492	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.868016958 CEST	60492	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.868016958 CEST	60492	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.868031025 CEST	443	60492	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.868040085 CEST	443	60492	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.868566036 CEST	443	60493	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.868767977 CEST	443	60496	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.868819952 CEST	443	60493	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.868870974 CEST	443	60496	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.868884087 CEST	443	60493	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.868943930 CEST	60493	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.868944883 CEST	60493	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.868957043 CEST	60496	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.869082928 CEST	60493	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.869086981 CEST	443	60493	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.869112015 CEST	60493	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.869117975 CEST	443	60493	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.869225979 CEST	60496	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.869225979 CEST	60496	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.869241953 CEST	443	60496	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.869256973 CEST	443	60496	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.871020079 CEST	443	60495	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.871054888 CEST	60498	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.871067047 CEST	443	60498	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.871093035 CEST	443	60495	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.871131897 CEST	60498	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.871279001 CEST	60495	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.871287107 CEST	60498	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.871319056 CEST	443	60498	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.871395111 CEST	60499	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.871398926 CEST	60495	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.871398926 CEST	60495	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.871411085 CEST	443	60495	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.871424913 CEST	443	60499	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.871428013 CEST	443	60495	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.871665001 CEST	60499	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.872383118 CEST	60500	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.872426033 CEST	443	60500	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.872570038 CEST	60500	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.872572899 CEST	60499	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.872591019 CEST	443	60499	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.872785091 CEST	60500	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.872802019 CEST	443	60500	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.873616934 CEST	60501	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.873657942 CEST	443	60501	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:10.873888016 CEST	60501	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.873888016 CEST	60501	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:10.873918056 CEST	443	60501	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.491741896 CEST	60436	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:33:11.491771936 CEST	443	60436	142.250.185.196	192.168.2.4
Oct 17, 2024 11:33:11.610981941 CEST	443	60501	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.611696959 CEST	60501	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.611725092 CEST	443	60501	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.612126112 CEST	60501	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.612133026 CEST	443	60501	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.614705086 CEST	443	60498	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.615330935 CEST	60498	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.615356922 CEST	443	60498	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.615967035 CEST	60498	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.615987062 CEST	443	60498	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.618352890 CEST	443	60499	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.618760109 CEST	443	60497	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.619369030 CEST	60499	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.619389057 CEST	443	60499	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.619415045 CEST	60499	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.619421005 CEST	443	60499	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.628401041 CEST	443	60500	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.628995895 CEST	60500	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.629019022 CEST	443	60500	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.629479885 CEST	60500	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.629487991 CEST	443	60500	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.630662918 CEST	60497	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.630686998 CEST	443	60497	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.631109953 CEST	60497	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.631115913 CEST	443	60497	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.743907928 CEST	443	60501	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.744088888 CEST	443	60501	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.744148016 CEST	60501	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.744244099 CEST	60501	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.744261980 CEST	443	60501	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.744273901 CEST	60501	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.744282007 CEST	443	60501	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.747102022 CEST	60502	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.747127056 CEST	443	60502	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.747189045 CEST	60502	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.747327089 CEST	60502	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.747340918 CEST	443	60502	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.748883009 CEST	443	60498	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.748951912 CEST	443	60498	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.749002934 CEST	60498	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.749116898 CEST	60498	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.749116898 CEST	60498	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.749133110 CEST	443	60498	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.749141932 CEST	443	60498	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.751224041 CEST	60503	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.751255989 CEST	443	60503	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.751327038 CEST	60503	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.751440048 CEST	60503	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.751454115 CEST	443	60503	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.751915932 CEST	443	60499	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.752012968 CEST	443	60499	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.752078056 CEST	60499	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.752088070 CEST	443	60499	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.752150059 CEST	443	60499	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.752167940 CEST	60499	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.752197027 CEST	443	60499	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.752208948 CEST	60499	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.752208948 CEST	60499	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.752218008 CEST	443	60499	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.752227068 CEST	443	60499	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.754273891 CEST	60504	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.754302979 CEST	443	60504	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.754359007 CEST	60504	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.754486084 CEST	60504	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.754497051 CEST	443	60504	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.761320114 CEST	443	60497	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.761394024 CEST	443	60497	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.761447906 CEST	60497	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.761550903 CEST	60497	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.761569977 CEST	443	60497	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.761588097 CEST	443	60500	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.761590004 CEST	60497	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.761595964 CEST	443	60497	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.761720896 CEST	443	60500	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.761768103 CEST	60500	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.761801958 CEST	60500	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.761811972 CEST	443	60500	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.761831045 CEST	60500	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.761837959 CEST	443	60500	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.764722109 CEST	60505	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.764750957 CEST	443	60505	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.764810085 CEST	60505	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.764939070 CEST	60505	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.764950991 CEST	443	60505	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.765156031 CEST	60506	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.765166998 CEST	443	60506	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:11.765217066 CEST	60506	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.765314102 CEST	60506	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:11.765321016 CEST	443	60506	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.503177881 CEST	443	60502	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.503693104 CEST	60502	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.503725052 CEST	443	60502	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.504143000 CEST	60502	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.504149914 CEST	443	60502	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.505465031 CEST	443	60504	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.505877972 CEST	60504	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.505903959 CEST	443	60504	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.506251097 CEST	60504	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.506259918 CEST	443	60504	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.517148972 CEST	443	60503	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.517474890 CEST	60503	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.517505884 CEST	443	60503	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.517844915 CEST	60503	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.517858982 CEST	443	60503	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.518560886 CEST	443	60506	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.518831968 CEST	60506	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.518853903 CEST	443	60506	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.519165039 CEST	60506	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.519174099 CEST	443	60506	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.529236078 CEST	443	60505	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.529556036 CEST	60505	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.529567003 CEST	443	60505	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.529934883 CEST	60505	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.529941082 CEST	443	60505	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.633608103 CEST	443	60502	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.633769035 CEST	443	60502	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.633893013 CEST	60502	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.633923054 CEST	60502	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.633936882 CEST	443	60502	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.636533022 CEST	60508	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.636570930 CEST	443	60508	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.636691093 CEST	60508	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.636753082 CEST	60508	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.636765957 CEST	443	60508	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.639075994 CEST	443	60504	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.639179945 CEST	443	60504	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.639261007 CEST	60504	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.639286041 CEST	60504	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.639297009 CEST	443	60504	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.641469002 CEST	60509	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.641510010 CEST	443	60509	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.641644001 CEST	60509	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.641768932 CEST	60509	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.641787052 CEST	443	60509	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.651844978 CEST	443	60506	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.651909113 CEST	443	60506	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.651978970 CEST	60506	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.652111053 CEST	60506	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.652111053 CEST	60506	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.652126074 CEST	443	60506	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.652137041 CEST	443	60506	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.652220964 CEST	443	60503	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.652261972 CEST	443	60503	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.652303934 CEST	443	60503	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.652350903 CEST	60503	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.652410030 CEST	60503	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.652430058 CEST	443	60503	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.652441978 CEST	60503	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.652447939 CEST	443	60503	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.654416084 CEST	60510	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.654432058 CEST	443	60510	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.654536009 CEST	60511	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.654562950 CEST	60510	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.654570103 CEST	443	60511	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.654633999 CEST	60511	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.654668093 CEST	60510	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.654679060 CEST	443	60510	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.654774904 CEST	60511	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.654787064 CEST	443	60511	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.663489103 CEST	443	60505	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.663575888 CEST	443	60505	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.663710117 CEST	60505	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.663832903 CEST	60505	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.663841009 CEST	443	60505	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.663853884 CEST	60505	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.663861036 CEST	443	60505	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.666393995 CEST	60512	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.666420937 CEST	443	60512	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:12.666572094 CEST	60512	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.666807890 CEST	60512	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:12.666820049 CEST	443	60512	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.410974979 CEST	443	60508	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.411494970 CEST	60508	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.411520004 CEST	443	60508	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.412110090 CEST	60508	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.412115097 CEST	443	60508	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.413801908 CEST	443	60509	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.414130926 CEST	60509	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.414160013 CEST	443	60509	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.414510012 CEST	60509	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.414515972 CEST	443	60509	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.418169022 CEST	443	60510	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.418462992 CEST	60510	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.418471098 CEST	443	60510	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.418797016 CEST	60510	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.418802023 CEST	443	60510	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.424134016 CEST	443	60511	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.424757004 CEST	60511	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.424757004 CEST	60511	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.424770117 CEST	443	60511	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.424784899 CEST	443	60511	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.429377079 CEST	443	60512	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.429815054 CEST	60512	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.429825068 CEST	443	60512	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.430021048 CEST	60512	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.430026054 CEST	443	60512	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.551299095 CEST	443	60508	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.551337004 CEST	443	60508	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.551378965 CEST	443	60508	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.551569939 CEST	60508	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.551600933 CEST	60508	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.551600933 CEST	60508	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.551620007 CEST	443	60508	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.551629066 CEST	443	60508	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.553958893 CEST	443	60509	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.554120064 CEST	443	60509	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.554173946 CEST	60509	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.554730892 CEST	443	60510	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.554801941 CEST	60509	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.554809093 CEST	443	60510	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.554821014 CEST	443	60509	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.554833889 CEST	60509	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.554843903 CEST	443	60509	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.554888964 CEST	60510	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.555633068 CEST	60513	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.555660009 CEST	443	60513	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.555746078 CEST	60513	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.556231976 CEST	60510	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.556237936 CEST	443	60510	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.556247950 CEST	60510	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.556252003 CEST	443	60510	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.556586981 CEST	60513	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.556596041 CEST	443	60513	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.558146000 CEST	60514	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.558165073 CEST	443	60514	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.558212996 CEST	60514	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.558461905 CEST	60514	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.558476925 CEST	443	60514	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.558826923 CEST	60515	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.558851004 CEST	443	60515	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.559029102 CEST	60515	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.559029102 CEST	60515	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.559050083 CEST	443	60515	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.571436882 CEST	443	60511	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.571629047 CEST	443	60511	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.571671963 CEST	443	60512	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.571698904 CEST	443	60512	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.571758986 CEST	60511	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.571758986 CEST	60512	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.571767092 CEST	443	60512	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.571846008 CEST	60512	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.571846008 CEST	60512	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.571862936 CEST	443	60512	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.571907043 CEST	60512	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.571907043 CEST	60511	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.571914911 CEST	443	60512	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.571922064 CEST	443	60511	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.572679043 CEST	60511	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.572693110 CEST	443	60511	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.573844910 CEST	60516	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.573870897 CEST	443	60516	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.573957920 CEST	60516	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.573985100 CEST	60517	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.574011087 CEST	443	60517	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.574095011 CEST	60517	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.574158907 CEST	60516	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.574168921 CEST	443	60516	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:13.574265957 CEST	60517	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:13.574276924 CEST	443	60517	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.338447094 CEST	443	60515	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.344541073 CEST	60515	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.344552994 CEST	443	60515	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.345199108 CEST	60515	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.345206976 CEST	443	60515	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.349154949 CEST	443	60513	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.350047112 CEST	60513	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.350064039 CEST	443	60513	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.350827932 CEST	60513	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.350833893 CEST	443	60513	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.353060961 CEST	443	60516	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.353528023 CEST	60516	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.353549957 CEST	443	60516	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.353591919 CEST	443	60514	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.354654074 CEST	60516	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.354661942 CEST	443	60516	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.355038881 CEST	60514	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.355055094 CEST	443	60514	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.355523109 CEST	60514	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.355529070 CEST	443	60514	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.381624937 CEST	443	60517	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.388519049 CEST	60517	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.388533115 CEST	443	60517	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.389916897 CEST	60517	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.389923096 CEST	443	60517	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.497301102 CEST	443	60515	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.497920036 CEST	443	60515	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.497982979 CEST	60515	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.498011112 CEST	60515	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.498027086 CEST	443	60515	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.498037100 CEST	60515	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.498044014 CEST	443	60515	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.503722906 CEST	60518	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.503768921 CEST	443	60518	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.503840923 CEST	60518	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.504425049 CEST	60518	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.504439116 CEST	443	60518	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.504936934 CEST	443	60513	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.505007982 CEST	443	60513	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.505126953 CEST	60513	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.505361080 CEST	60513	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.505374908 CEST	443	60513	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.505590916 CEST	443	60516	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.505620003 CEST	443	60516	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.505666971 CEST	443	60516	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.505717039 CEST	60516	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.505882025 CEST	60516	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.505896091 CEST	443	60516	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.505906105 CEST	60516	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.505912066 CEST	443	60516	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.507664919 CEST	443	60514	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.507708073 CEST	443	60514	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.507766962 CEST	443	60514	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.507814884 CEST	60514	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.508150101 CEST	60514	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.508157015 CEST	443	60514	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.508176088 CEST	60514	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.508181095 CEST	443	60514	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.512934923 CEST	60519	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.512959957 CEST	443	60519	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.513019085 CEST	60519	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.513858080 CEST	60519	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.513870001 CEST	443	60519	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.516618013 CEST	60520	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.516645908 CEST	443	60520	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.516706944 CEST	60520	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.517196894 CEST	60520	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.517211914 CEST	443	60520	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.518083096 CEST	60521	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.518131018 CEST	443	60521	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.518249035 CEST	60521	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.518441916 CEST	60521	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.518460989 CEST	443	60521	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.545011044 CEST	443	60517	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.545083046 CEST	443	60517	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.545201063 CEST	60517	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.545341969 CEST	60517	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.545351028 CEST	443	60517	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.545365095 CEST	60517	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.545371056 CEST	443	60517	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.548569918 CEST	60522	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.548600912 CEST	443	60522	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:14.548913956 CEST	60522	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.549293041 CEST	60522	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:14.549309015 CEST	443	60522	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.326807022 CEST	443	60518	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.327322960 CEST	60518	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.327356100 CEST	443	60518	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.327872992 CEST	60518	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.327881098 CEST	443	60518	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.333710909 CEST	443	60520	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.334062099 CEST	60520	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.334094048 CEST	443	60520	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.334470034 CEST	60520	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.334480047 CEST	443	60520	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.336285114 CEST	443	60521	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.336594105 CEST	60521	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.336625099 CEST	443	60521	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.336946964 CEST	60521	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.336956978 CEST	443	60521	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.336978912 CEST	443	60519	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.337301970 CEST	60519	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.337325096 CEST	443	60519	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.337728977 CEST	60519	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.337738037 CEST	443	60519	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.369612932 CEST	443	60522	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.370055914 CEST	60522	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.370075941 CEST	443	60522	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.370450974 CEST	60522	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.370460033 CEST	443	60522	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.469160080 CEST	443	60518	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.469260931 CEST	443	60518	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.469316959 CEST	443	60518	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.469369888 CEST	60518	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.469489098 CEST	60518	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.469511986 CEST	443	60518	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.469521999 CEST	60518	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.469528913 CEST	443	60518	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.472549915 CEST	60523	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.472585917 CEST	443	60523	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.472640038 CEST	60523	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.472832918 CEST	60523	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.472846985 CEST	443	60523	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.480473042 CEST	443	60521	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.480540991 CEST	443	60521	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.480602026 CEST	60521	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.480752945 CEST	60521	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.480771065 CEST	443	60521	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.480782986 CEST	60521	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.480793953 CEST	443	60521	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.480969906 CEST	443	60519	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.481168032 CEST	443	60519	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.481260061 CEST	60519	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.481297970 CEST	60519	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.481313944 CEST	443	60519	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.481327057 CEST	60519	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.481332064 CEST	443	60519	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.483347893 CEST	60524	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.483390093 CEST	443	60524	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.483437061 CEST	60525	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.483475924 CEST	443	60525	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.483525991 CEST	60525	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.483640909 CEST	60524	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.483640909 CEST	60524	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.483674049 CEST	443	60524	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.483685970 CEST	60525	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.483699083 CEST	443	60525	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.496664047 CEST	443	60520	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.496692896 CEST	443	60520	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.496742010 CEST	443	60520	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.496767044 CEST	60520	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.496798038 CEST	60520	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.496908903 CEST	60520	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.496918917 CEST	443	60520	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.496947050 CEST	60520	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.496954918 CEST	443	60520	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.499036074 CEST	60526	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.499072075 CEST	443	60526	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.499253035 CEST	60526	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.499403000 CEST	60526	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.499413967 CEST	443	60526	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.516688108 CEST	443	60522	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.516896963 CEST	443	60522	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.516963959 CEST	60522	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.517009974 CEST	60522	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.517025948 CEST	443	60522	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.517038107 CEST	60522	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.517044067 CEST	443	60522	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.519164085 CEST	60527	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.519191980 CEST	443	60527	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:15.519248962 CEST	60527	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.519398928 CEST	60527	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:15.519419909 CEST	443	60527	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.280961037 CEST	443	60527	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.281630039 CEST	60527	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.281642914 CEST	443	60527	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.282250881 CEST	443	60523	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.282315016 CEST	60527	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.282320976 CEST	443	60527	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.282735109 CEST	60523	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.282759905 CEST	443	60523	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.283221006 CEST	60523	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.283227921 CEST	443	60523	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.285274982 CEST	443	60525	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.285670996 CEST	60525	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.285693884 CEST	443	60525	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.286200047 CEST	443	60526	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.286303043 CEST	60525	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.286313057 CEST	443	60525	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.286664009 CEST	60526	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.286674976 CEST	443	60526	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.287604094 CEST	60526	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.287614107 CEST	443	60526	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.291477919 CEST	443	60524	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.291837931 CEST	60524	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.291851997 CEST	443	60524	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.292440891 CEST	60524	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.292448997 CEST	443	60524	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.419249058 CEST	443	60527	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.419559956 CEST	443	60527	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.421102047 CEST	60527	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.421103001 CEST	60527	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.421168089 CEST	60527	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.421185970 CEST	443	60527	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.425384045 CEST	60528	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.425421000 CEST	443	60528	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.425506115 CEST	60528	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.425723076 CEST	60528	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.425734997 CEST	443	60528	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.425972939 CEST	443	60525	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.426239967 CEST	443	60525	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.426310062 CEST	60525	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.426501036 CEST	60525	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.426521063 CEST	443	60525	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.426534891 CEST	60525	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.426541090 CEST	443	60525	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.427565098 CEST	443	60526	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.427623034 CEST	443	60526	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.427663088 CEST	443	60526	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.427711010 CEST	60526	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.445960999 CEST	443	60523	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.446017981 CEST	443	60523	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.446060896 CEST	443	60524	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.446090937 CEST	443	60524	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.446122885 CEST	60523	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.446144104 CEST	443	60524	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.446171999 CEST	60524	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.446806908 CEST	60524	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.449328899 CEST	60526	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.449328899 CEST	60526	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.449353933 CEST	443	60526	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.449371099 CEST	443	60526	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.451426029 CEST	60523	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.451452017 CEST	443	60523	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.453140020 CEST	60524	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.453156948 CEST	443	60524	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.453327894 CEST	60524	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.453335047 CEST	443	60524	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.456274986 CEST	60529	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.456315994 CEST	443	60529	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.456495047 CEST	60529	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.457787037 CEST	60530	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.457808018 CEST	443	60530	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.457863092 CEST	60530	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.458558083 CEST	60531	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.458591938 CEST	443	60531	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.458677053 CEST	60529	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.458688021 CEST	443	60529	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.458713055 CEST	60531	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.458853960 CEST	60531	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.458864927 CEST	443	60531	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.458888054 CEST	60530	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.458894014 CEST	443	60530	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.459475994 CEST	60532	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.459513903 CEST	443	60532	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:16.459660053 CEST	60532	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.459841013 CEST	60532	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:16.459855080 CEST	443	60532	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.194746017 CEST	443	60528	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.197743893 CEST	443	60532	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.197974920 CEST	443	60529	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.211301088 CEST	443	60530	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.213190079 CEST	443	60531	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.216218948 CEST	60531	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.216253042 CEST	443	60531	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.217528105 CEST	60531	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.217539072 CEST	443	60531	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.218380928 CEST	60528	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.218389988 CEST	443	60528	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.219269037 CEST	60528	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.219273090 CEST	443	60528	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.220108032 CEST	60532	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.220132113 CEST	443	60532	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.221162081 CEST	60532	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.221169949 CEST	443	60532	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.221733093 CEST	60529	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.221760035 CEST	443	60529	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.222562075 CEST	60529	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.222575903 CEST	443	60529	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.223459005 CEST	60530	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.223469019 CEST	443	60530	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.224555016 CEST	60530	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.224562883 CEST	443	60530	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.344459057 CEST	443	60531	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.344523907 CEST	443	60531	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.344571114 CEST	60531	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.344886065 CEST	60531	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.344902992 CEST	443	60531	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.347101927 CEST	443	60529	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.347278118 CEST	443	60529	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.347337961 CEST	60529	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.347554922 CEST	443	60532	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.347918034 CEST	60529	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.347932100 CEST	443	60528	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.347940922 CEST	443	60529	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.348037004 CEST	443	60532	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.348052025 CEST	443	60528	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.348084927 CEST	443	60532	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.348093033 CEST	60528	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.348094940 CEST	60532	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.348123074 CEST	60532	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.352160931 CEST	443	60530	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.352202892 CEST	443	60530	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.352241993 CEST	60530	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.352247953 CEST	443	60530	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.352288961 CEST	60530	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.353338957 CEST	60533	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.353378057 CEST	443	60533	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.353430033 CEST	60533	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.353501081 CEST	60532	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.353501081 CEST	60532	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.353518963 CEST	443	60532	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.353528023 CEST	443	60532	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.355026007 CEST	60533	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.355043888 CEST	443	60533	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.355493069 CEST	60528	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.355504990 CEST	443	60528	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.355514050 CEST	60528	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.355519056 CEST	443	60528	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.357933044 CEST	60530	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.357952118 CEST	443	60530	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.357964993 CEST	60530	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.357970953 CEST	443	60530	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.362103939 CEST	60534	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.362129927 CEST	443	60534	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.362181902 CEST	60534	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.364831924 CEST	60535	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.364850044 CEST	443	60535	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.364893913 CEST	60535	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.365166903 CEST	60534	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.365183115 CEST	443	60534	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.367364883 CEST	60536	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.367402077 CEST	443	60536	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.367446899 CEST	60536	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.367703915 CEST	60536	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.367716074 CEST	443	60536	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.367902994 CEST	60535	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.367913961 CEST	443	60535	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.369194031 CEST	60537	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.369221926 CEST	443	60537	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:17.369276047 CEST	60537	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.369426966 CEST	60537	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:17.369436979 CEST	443	60537	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.130101919 CEST	443	60537	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.130877972 CEST	60537	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.130888939 CEST	443	60537	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.131042004 CEST	60537	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.131062031 CEST	443	60537	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.131623983 CEST	443	60534	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.132271051 CEST	60534	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.132271051 CEST	60534	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.132282972 CEST	443	60534	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.132296085 CEST	443	60534	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.139930964 CEST	443	60533	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.140613079 CEST	60533	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.140614033 CEST	60533	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.140638113 CEST	443	60533	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.140650034 CEST	443	60533	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.140898943 CEST	443	60536	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.141464949 CEST	60536	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.141464949 CEST	60536	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.141494036 CEST	443	60536	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.141506910 CEST	443	60536	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.142965078 CEST	443	60535	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.143404961 CEST	60535	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.143462896 CEST	443	60535	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.143614054 CEST	60535	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.143621922 CEST	443	60535	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.257744074 CEST	443	60537	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.257819891 CEST	443	60537	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.258099079 CEST	60537	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.258371115 CEST	60537	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.258371115 CEST	60537	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.258388042 CEST	443	60537	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.258397102 CEST	443	60537	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.262872934 CEST	60538	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.262901068 CEST	443	60538	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.263114929 CEST	60538	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.263721943 CEST	443	60534	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.263772011 CEST	60538	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.263797998 CEST	443	60538	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.263890028 CEST	443	60534	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.264024019 CEST	60534	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.264192104 CEST	60534	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.264192104 CEST	60534	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.264210939 CEST	443	60534	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.264219046 CEST	443	60534	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.267100096 CEST	60539	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.267136097 CEST	443	60539	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.267321110 CEST	60539	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.267321110 CEST	60539	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.267349958 CEST	443	60539	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.271984100 CEST	443	60533	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.272249937 CEST	443	60533	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.272361040 CEST	60533	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.272813082 CEST	60533	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.272825003 CEST	443	60533	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.272891045 CEST	60533	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.272896051 CEST	443	60533	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.275513887 CEST	443	60535	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.275590897 CEST	443	60535	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.275810957 CEST	60535	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.275810957 CEST	60535	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.276128054 CEST	60535	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.276137114 CEST	443	60535	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.277507067 CEST	60540	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.277605057 CEST	443	60540	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.278920889 CEST	60540	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.279117107 CEST	60540	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.279128075 CEST	60541	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.279151917 CEST	443	60540	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.279211998 CEST	443	60541	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.279361010 CEST	60541	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.280117035 CEST	60541	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.280150890 CEST	443	60541	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.326718092 CEST	443	60536	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.326787949 CEST	443	60536	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.326931953 CEST	60536	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.327032089 CEST	60536	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.327032089 CEST	60536	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.327071905 CEST	443	60536	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.327096939 CEST	443	60536	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.328850031 CEST	60542	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.328882933 CEST	443	60542	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:18.329085112 CEST	60542	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.329085112 CEST	60542	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:18.329137087 CEST	443	60542	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.020097971 CEST	443	60539	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.020929098 CEST	60539	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.020952940 CEST	443	60539	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.021198988 CEST	60539	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.021209002 CEST	443	60539	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.042475939 CEST	443	60541	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.042826891 CEST	60541	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.042836905 CEST	443	60541	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.043210983 CEST	60541	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.043215036 CEST	443	60541	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.059540033 CEST	443	60538	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.059865952 CEST	60538	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.059895039 CEST	443	60538	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.060226917 CEST	60538	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.060239077 CEST	443	60538	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.062638044 CEST	443	60540	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.063350916 CEST	60540	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.063350916 CEST	60540	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.063416958 CEST	443	60540	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.063456059 CEST	443	60540	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.102888107 CEST	443	60542	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.103216887 CEST	60542	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.103266001 CEST	443	60542	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.103682041 CEST	60542	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.103701115 CEST	443	60542	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.163919926 CEST	443	60539	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.164174080 CEST	443	60539	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.164247990 CEST	60539	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.164329052 CEST	60539	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.164329052 CEST	60539	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.164362907 CEST	443	60539	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.164390087 CEST	443	60539	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.168453932 CEST	60543	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.168505907 CEST	443	60543	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.168591976 CEST	60543	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.168776989 CEST	60543	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.168807983 CEST	443	60543	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.182452917 CEST	443	60541	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.182533979 CEST	443	60541	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.182609081 CEST	60541	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.183109999 CEST	60541	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.183109999 CEST	60541	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.183150053 CEST	443	60541	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.183176041 CEST	443	60541	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.185671091 CEST	60544	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.185699940 CEST	443	60544	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.185805082 CEST	60544	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.185914040 CEST	60544	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.185926914 CEST	443	60544	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.204107046 CEST	443	60538	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.204169989 CEST	443	60538	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.204292059 CEST	60538	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.204349995 CEST	60538	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.204368114 CEST	443	60538	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.204397917 CEST	60538	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.204405069 CEST	443	60538	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.206546068 CEST	60545	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.206584930 CEST	443	60545	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.206655025 CEST	60545	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.206810951 CEST	60545	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.206823111 CEST	443	60545	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.209033012 CEST	443	60540	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.209439039 CEST	443	60540	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.209491968 CEST	60540	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.209503889 CEST	443	60540	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.209533930 CEST	443	60540	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.209584951 CEST	60540	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.209604979 CEST	443	60540	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.209620953 CEST	60540	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.209620953 CEST	60540	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.209628105 CEST	443	60540	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.209634066 CEST	443	60540	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.211585045 CEST	60546	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.211594105 CEST	443	60546	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.211853027 CEST	60546	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.211966038 CEST	60546	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.211977959 CEST	443	60546	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.244015932 CEST	443	60542	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.244066954 CEST	443	60542	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.244136095 CEST	60542	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.244350910 CEST	60542	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.244369984 CEST	443	60542	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.244421005 CEST	60542	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.244434118 CEST	443	60542	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.246402025 CEST	60547	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.246440887 CEST	443	60547	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.246505976 CEST	60547	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.246649981 CEST	60547	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.246658087 CEST	443	60547	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.952584028 CEST	443	60543	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.953032017 CEST	60543	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.953057051 CEST	443	60543	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.953660965 CEST	60543	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.953665972 CEST	443	60543	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.963378906 CEST	443	60544	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.964113951 CEST	60544	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.964142084 CEST	443	60544	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.964514017 CEST	60544	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.964520931 CEST	443	60544	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.970231056 CEST	443	60546	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.970546007 CEST	60546	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.970573902 CEST	443	60546	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.970969915 CEST	60546	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.970974922 CEST	443	60546	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.973404884 CEST	443	60545	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.973680019 CEST	60545	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.973685980 CEST	443	60545	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:19.974041939 CEST	60545	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:19.974045992 CEST	443	60545	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.026904106 CEST	443	60547	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.027226925 CEST	60547	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.027245045 CEST	443	60547	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.027600050 CEST	60547	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.027605057 CEST	443	60547	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.089535952 CEST	443	60543	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.089961052 CEST	443	60543	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.090029001 CEST	60543	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.090065002 CEST	60543	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.090065002 CEST	60543	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.090081930 CEST	443	60543	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.090089083 CEST	443	60543	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.092767000 CEST	60548	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.092819929 CEST	443	60548	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.092911005 CEST	60548	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.093055010 CEST	60548	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.093064070 CEST	443	60548	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.097012043 CEST	443	60544	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.097029924 CEST	443	60544	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.097079039 CEST	443	60544	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.097079992 CEST	60544	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.097165108 CEST	60544	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.097248077 CEST	60544	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.097248077 CEST	60544	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.097353935 CEST	443	60544	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.097368002 CEST	443	60544	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.099227905 CEST	60549	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.099258900 CEST	443	60549	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.099425077 CEST	60549	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.099560976 CEST	60549	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.099575996 CEST	443	60549	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.102479935 CEST	443	60546	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.102546930 CEST	443	60546	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.102612019 CEST	60546	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.102622032 CEST	443	60546	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.102648020 CEST	443	60546	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.102761030 CEST	60546	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.102778912 CEST	443	60546	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.102791071 CEST	60546	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.102791071 CEST	60546	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.102797985 CEST	443	60546	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.102804899 CEST	443	60546	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.105693102 CEST	60550	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.105700970 CEST	443	60550	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.105869055 CEST	60550	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.105992079 CEST	60550	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.106004000 CEST	443	60550	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.107892036 CEST	443	60545	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.107939005 CEST	443	60545	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.107983112 CEST	443	60545	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.107994080 CEST	60545	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.108026028 CEST	60545	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.108123064 CEST	60545	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.108128071 CEST	443	60545	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.108138084 CEST	60545	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.108141899 CEST	443	60545	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.110074997 CEST	60551	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.110115051 CEST	443	60551	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.110188007 CEST	60551	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.110337019 CEST	60551	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.110347986 CEST	443	60551	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.160159111 CEST	443	60547	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.160218954 CEST	443	60547	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.160329103 CEST	60547	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.160362959 CEST	60547	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.160379887 CEST	443	60547	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.160396099 CEST	60547	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.160401106 CEST	443	60547	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.162517071 CEST	60552	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.162630081 CEST	443	60552	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.162704945 CEST	60552	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.162911892 CEST	60552	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.162946939 CEST	443	60552	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.848004103 CEST	443	60549	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.848517895 CEST	60549	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.848588943 CEST	443	60549	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.849215984 CEST	60549	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.849220991 CEST	443	60549	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.849361897 CEST	443	60548	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.849734068 CEST	60548	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.849761009 CEST	443	60548	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.850347996 CEST	60548	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.850361109 CEST	443	60548	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.856390953 CEST	443	60550	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.856862068 CEST	60550	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.856873989 CEST	443	60550	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.857182980 CEST	60550	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.857187033 CEST	443	60550	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.857661963 CEST	443	60551	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.858175039 CEST	60551	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.858197927 CEST	443	60551	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.858469009 CEST	60551	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.858474016 CEST	443	60551	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.904787064 CEST	443	60552	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.905200005 CEST	60552	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.905235052 CEST	443	60552	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.905752897 CEST	60552	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.905759096 CEST	443	60552	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.987678051 CEST	443	60548	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.987750053 CEST	443	60548	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.987822056 CEST	60548	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.987854958 CEST	443	60548	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.987875938 CEST	443	60548	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.987934113 CEST	60548	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.988238096 CEST	60548	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.988253117 CEST	443	60548	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.988286018 CEST	60548	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.988291979 CEST	443	60548	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.990207911 CEST	443	60549	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.990524054 CEST	443	60549	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.990595102 CEST	60549	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.990621090 CEST	60549	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.990631104 CEST	443	60549	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.990653038 CEST	60549	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.990658998 CEST	443	60549	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991272926 CEST	60553	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.991314888 CEST	443	60553	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991404057 CEST	443	60550	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991465092 CEST	443	60550	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991491079 CEST	60553	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.991547108 CEST	60550	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.991553068 CEST	443	60550	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991651058 CEST	60553	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.991661072 CEST	443	60553	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991672993 CEST	443	60551	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991703033 CEST	443	60550	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991755962 CEST	60550	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.991761923 CEST	443	60551	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991811991 CEST	60551	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.991866112 CEST	60550	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.991871119 CEST	443	60550	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991874933 CEST	443	60551	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991919994 CEST	60551	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.991929054 CEST	443	60551	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991941929 CEST	60551	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.991941929 CEST	60551	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.991946936 CEST	443	60551	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.991954088 CEST	443	60551	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.994894981 CEST	60554	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.994913101 CEST	443	60554	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.995170116 CEST	60554	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.995351076 CEST	60554	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.995363951 CEST	443	60554	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.995417118 CEST	60555	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.995445013 CEST	443	60555	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.995567083 CEST	60555	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.995695114 CEST	60555	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.995707035 CEST	443	60555	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.996397972 CEST	60556	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.996423960 CEST	443	60556	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:20.996501923 CEST	60556	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.996701002 CEST	60556	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:20.996712923 CEST	443	60556	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.049757004 CEST	443	60552	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.049827099 CEST	443	60552	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.049877882 CEST	443	60552	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.049933910 CEST	60552	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.050113916 CEST	60552	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.050113916 CEST	60552	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.050126076 CEST	443	60552	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.050134897 CEST	443	60552	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.052684069 CEST	60557	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.052787066 CEST	443	60557	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.052867889 CEST	60557	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.053075075 CEST	60557	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.053107977 CEST	443	60557	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.738275051 CEST	443	60556	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.739940882 CEST	60556	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.739955902 CEST	443	60556	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.740689039 CEST	60556	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.740693092 CEST	443	60556	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.747978926 CEST	443	60554	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.759963989 CEST	443	60553	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.760929108 CEST	443	60555	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.766669035 CEST	60554	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.766705036 CEST	443	60554	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.767307043 CEST	60554	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.767313957 CEST	443	60554	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.782226086 CEST	60553	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.782253027 CEST	443	60553	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.782788038 CEST	60553	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.782798052 CEST	443	60553	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.783292055 CEST	60555	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.783313990 CEST	443	60555	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.783802986 CEST	60555	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.783807993 CEST	443	60555	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.804409981 CEST	443	60557	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.821141005 CEST	60557	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.821204901 CEST	443	60557	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.821796894 CEST	60557	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.821810007 CEST	443	60557	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.867863894 CEST	443	60556	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.868005037 CEST	443	60556	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.868067026 CEST	60556	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.897392988 CEST	443	60554	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.897553921 CEST	443	60554	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.897615910 CEST	60554	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.899770021 CEST	60556	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.899770021 CEST	60556	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.899789095 CEST	443	60556	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.899799109 CEST	443	60556	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.905668974 CEST	60554	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.905700922 CEST	443	60554	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.905719995 CEST	60554	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.905728102 CEST	443	60554	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.909487963 CEST	443	60555	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.909559965 CEST	443	60555	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.909693956 CEST	443	60555	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.909693003 CEST	60555	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.909770966 CEST	60555	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.910355091 CEST	443	60553	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.910505056 CEST	443	60553	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.910562992 CEST	60553	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.946687937 CEST	443	60557	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.946752071 CEST	443	60557	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.946856976 CEST	60557	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.976878881 CEST	60555	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.976938963 CEST	443	60555	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.976957083 CEST	60555	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.976977110 CEST	443	60555	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.978652954 CEST	60553	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.978682995 CEST	443	60553	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.998862028 CEST	60557	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.998862982 CEST	60557	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:21.998924971 CEST	443	60557	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:21.999011993 CEST	443	60557	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.151137114 CEST	60558	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.151227951 CEST	443	60558	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.151318073 CEST	60558	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.154535055 CEST	60558	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.154571056 CEST	443	60558	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.158602953 CEST	60559	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.158637047 CEST	443	60559	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.158762932 CEST	60559	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.159684896 CEST	60559	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.159699917 CEST	443	60559	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.160371065 CEST	60560	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.160408974 CEST	443	60560	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.160543919 CEST	60560	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.160675049 CEST	60560	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.160687923 CEST	443	60560	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.161457062 CEST	60561	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.161494970 CEST	443	60561	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.161720991 CEST	60561	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.162218094 CEST	60562	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.162225008 CEST	443	60562	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.162295103 CEST	60562	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.162571907 CEST	60561	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.162584066 CEST	443	60561	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.163106918 CEST	60562	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.163115978 CEST	443	60562	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.930999994 CEST	443	60558	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.931773901 CEST	60558	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.931859970 CEST	443	60558	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.932409048 CEST	60558	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.932424068 CEST	443	60558	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.946466923 CEST	443	60562	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.947112083 CEST	443	60561	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.948849916 CEST	443	60560	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.964458942 CEST	60562	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.964499950 CEST	443	60562	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.965856075 CEST	60562	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.965862989 CEST	443	60562	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.967822075 CEST	60561	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.967837095 CEST	443	60561	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.968676090 CEST	60561	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.968681097 CEST	443	60561	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.969501972 CEST	60560	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.969526052 CEST	443	60560	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.970104933 CEST	60560	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.970108986 CEST	443	60560	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.979368925 CEST	443	60559	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.979659081 CEST	60559	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.979674101 CEST	443	60559	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:22.980370045 CEST	60559	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:22.980375051 CEST	443	60559	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.064234972 CEST	443	60558	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.064300060 CEST	443	60558	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.064369917 CEST	443	60558	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.064383030 CEST	60558	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.064428091 CEST	60558	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.064954042 CEST	60558	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.064971924 CEST	443	60558	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.064989090 CEST	60558	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.064995050 CEST	443	60558	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.070437908 CEST	60563	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.070480108 CEST	443	60563	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.070626020 CEST	60563	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.071099043 CEST	60563	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.071110010 CEST	443	60563	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.103041887 CEST	443	60561	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.103203058 CEST	443	60561	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.103260994 CEST	60561	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.103307962 CEST	60561	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.103336096 CEST	443	60561	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.103352070 CEST	60561	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.103358984 CEST	443	60561	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.104077101 CEST	443	60560	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.104145050 CEST	443	60560	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.104207039 CEST	443	60560	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.104221106 CEST	60560	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.104274035 CEST	60560	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.105017900 CEST	443	60562	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.105190039 CEST	443	60562	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.105246067 CEST	60562	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.105834007 CEST	60560	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.105845928 CEST	443	60560	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.108390093 CEST	60562	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.108403921 CEST	443	60562	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.108417988 CEST	60562	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.108422995 CEST	443	60562	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.111779928 CEST	60564	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.111833096 CEST	443	60564	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.111893892 CEST	60564	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.114048958 CEST	60565	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.114089966 CEST	443	60565	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.114254951 CEST	60565	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.114892006 CEST	60564	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.114912987 CEST	443	60564	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.115360022 CEST	60565	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.115379095 CEST	443	60565	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.117022038 CEST	60566	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.117033958 CEST	443	60566	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.118314981 CEST	60566	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.118314981 CEST	60566	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.118338108 CEST	443	60566	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.120368958 CEST	443	60559	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.120659113 CEST	443	60559	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.120758057 CEST	60559	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.120799065 CEST	60559	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.120799065 CEST	60559	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.120815992 CEST	443	60559	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.120825052 CEST	443	60559	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.125219107 CEST	60567	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.125241041 CEST	443	60567	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.125310898 CEST	60567	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.125462055 CEST	60567	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.125479937 CEST	443	60567	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.823352098 CEST	443	60563	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.823803902 CEST	60563	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.823828936 CEST	443	60563	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.824244022 CEST	60563	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.824249029 CEST	443	60563	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.855222940 CEST	443	60566	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.856348991 CEST	60566	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.856348991 CEST	60566	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.856374025 CEST	443	60566	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.856389046 CEST	443	60566	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.865197897 CEST	443	60565	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.865624905 CEST	60565	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.865636110 CEST	443	60565	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.866023064 CEST	60565	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.866027117 CEST	443	60565	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.872786045 CEST	443	60564	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.873074055 CEST	443	60567	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.873171091 CEST	60564	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.873195887 CEST	443	60564	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.873549938 CEST	60564	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.873555899 CEST	443	60564	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.873641014 CEST	60567	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.873656034 CEST	443	60567	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.874124050 CEST	60567	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.874129057 CEST	443	60567	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.954583883 CEST	443	60563	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.954765081 CEST	443	60563	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.954869032 CEST	60563	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.954976082 CEST	60563	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.955002069 CEST	443	60563	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.955018044 CEST	60563	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.955024004 CEST	443	60563	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.962222099 CEST	60568	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.962318897 CEST	443	60568	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.962421894 CEST	60568	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.962786913 CEST	60568	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.962824106 CEST	443	60568	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.992062092 CEST	443	60566	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.992151022 CEST	443	60566	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.992275000 CEST	60566	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:23.992279053 CEST	443	60566	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:23.992368937 CEST	60566	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.004489899 CEST	443	60565	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.004652977 CEST	443	60565	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.004776001 CEST	60565	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.010690928 CEST	443	60567	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.010763884 CEST	443	60567	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.011049032 CEST	60567	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.018680096 CEST	60566	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.018702030 CEST	443	60566	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.018719912 CEST	60566	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.018726110 CEST	443	60566	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.020380974 CEST	443	60564	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.020684004 CEST	443	60564	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.020747900 CEST	60564	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.021034956 CEST	60564	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.021055937 CEST	443	60564	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.021068096 CEST	60564	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.021073103 CEST	443	60564	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.023540020 CEST	60565	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.023540020 CEST	60565	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.023545980 CEST	443	60565	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.023572922 CEST	443	60565	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.026365995 CEST	60567	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.026365995 CEST	60567	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.026374102 CEST	443	60567	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.026381969 CEST	443	60567	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.028744936 CEST	60569	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.028781891 CEST	443	60569	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.028870106 CEST	60569	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.030145884 CEST	60570	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.030153990 CEST	443	60570	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.030230045 CEST	60570	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.031125069 CEST	60569	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.031135082 CEST	443	60569	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.031295061 CEST	60570	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.031306982 CEST	443	60570	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.031869888 CEST	60571	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.031908035 CEST	443	60571	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.032464027 CEST	60571	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.032618999 CEST	60571	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.032644987 CEST	443	60571	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.032793999 CEST	60572	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.032830954 CEST	443	60572	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.032886982 CEST	60572	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.032967091 CEST	60572	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.032980919 CEST	443	60572	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.711855888 CEST	443	60568	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.712423086 CEST	60568	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.712469101 CEST	443	60568	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.713289022 CEST	60568	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.713305950 CEST	443	60568	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.775541067 CEST	443	60571	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.776015043 CEST	60571	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.776032925 CEST	443	60571	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.776724100 CEST	60571	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.776727915 CEST	443	60571	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.781661987 CEST	443	60572	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.781922102 CEST	443	60570	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.782191992 CEST	60572	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.782212019 CEST	443	60572	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.783134937 CEST	60572	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.783139944 CEST	443	60572	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.783543110 CEST	60570	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.783555031 CEST	443	60570	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.784159899 CEST	60570	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.784164906 CEST	443	60570	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.789134979 CEST	443	60569	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.789895058 CEST	60569	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.789901018 CEST	443	60569	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.790977955 CEST	60569	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.790988922 CEST	443	60569	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.839267015 CEST	443	60568	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.839334965 CEST	443	60568	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.839479923 CEST	443	60568	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.839549065 CEST	60568	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.839863062 CEST	60568	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.839891911 CEST	443	60568	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.839931965 CEST	60568	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.839946985 CEST	443	60568	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.844939947 CEST	60574	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.844980001 CEST	443	60574	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.845132113 CEST	60574	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.845482111 CEST	60574	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.845499992 CEST	443	60574	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.902012110 CEST	443	60571	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.902630091 CEST	443	60571	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.902703047 CEST	60571	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.902714014 CEST	443	60571	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.902748108 CEST	443	60571	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.902808905 CEST	60571	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.902965069 CEST	60571	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.902971983 CEST	443	60571	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.902982950 CEST	60571	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.902987957 CEST	443	60571	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.907758951 CEST	60575	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.907799959 CEST	443	60575	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.907871008 CEST	60575	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.908127069 CEST	60575	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.908138990 CEST	443	60575	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.910784006 CEST	443	60572	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.910948038 CEST	443	60572	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.911020994 CEST	60572	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.911284924 CEST	443	60570	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.911361933 CEST	443	60570	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.911465883 CEST	60570	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.911474943 CEST	443	60570	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.911498070 CEST	443	60570	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.911612988 CEST	60570	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.912848949 CEST	60572	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.912858009 CEST	443	60572	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.912868977 CEST	60572	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.912873983 CEST	443	60572	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.913814068 CEST	60570	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.913835049 CEST	443	60570	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.913889885 CEST	60570	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.913896084 CEST	443	60570	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.919675112 CEST	60576	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.919684887 CEST	443	60576	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.919980049 CEST	60576	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.920958042 CEST	60577	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.921001911 CEST	443	60577	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.921066046 CEST	60577	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.921366930 CEST	443	60569	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.921425104 CEST	60576	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.921435118 CEST	443	60576	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.921443939 CEST	443	60569	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.921509027 CEST	60569	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.921667099 CEST	60569	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.921667099 CEST	60569	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.921683073 CEST	443	60569	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.921713114 CEST	443	60569	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.923998117 CEST	60577	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.924029112 CEST	443	60577	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.925775051 CEST	60578	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.925807953 CEST	443	60578	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:24.925884962 CEST	60578	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.926239967 CEST	60578	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:24.926255941 CEST	443	60578	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.592122078 CEST	443	60574	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.592590094 CEST	60574	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.592655897 CEST	443	60574	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.593040943 CEST	60574	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.593054056 CEST	443	60574	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.657035112 CEST	443	60578	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.657386065 CEST	60578	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.657412052 CEST	443	60578	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.657783031 CEST	60578	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.657793045 CEST	443	60578	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.669012070 CEST	443	60577	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.669383049 CEST	60577	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.669397116 CEST	443	60577	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.669846058 CEST	60577	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.669856071 CEST	443	60577	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.669877052 CEST	443	60575	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.670161009 CEST	60575	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.670192003 CEST	443	60575	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.670523882 CEST	60575	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.670530081 CEST	443	60575	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.679965019 CEST	443	60576	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.680263996 CEST	60576	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.680272102 CEST	443	60576	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.680655956 CEST	60576	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.680660009 CEST	443	60576	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.725938082 CEST	443	60574	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.726152897 CEST	443	60574	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.726234913 CEST	60574	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.726294994 CEST	60574	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.726294994 CEST	60574	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.726317883 CEST	443	60574	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.726331949 CEST	443	60574	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.728677988 CEST	60579	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.728718996 CEST	443	60579	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.728815079 CEST	60579	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.728976011 CEST	60579	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.728986025 CEST	443	60579	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.797266006 CEST	443	60578	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.797503948 CEST	443	60578	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.797574997 CEST	60578	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.797621965 CEST	60578	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.797621965 CEST	60578	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.797646046 CEST	443	60578	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.797671080 CEST	443	60578	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.800115108 CEST	60580	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.800219059 CEST	443	60580	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.800326109 CEST	60580	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.800443888 CEST	60580	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.800467014 CEST	443	60580	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.807027102 CEST	443	60577	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.808296919 CEST	443	60577	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.808352947 CEST	60577	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.808373928 CEST	443	60577	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.808423996 CEST	443	60577	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.808475971 CEST	60577	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.808504105 CEST	443	60577	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.808528900 CEST	60577	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.808528900 CEST	60577	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.808546066 CEST	443	60577	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.808564901 CEST	443	60577	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.808788061 CEST	443	60575	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.808814049 CEST	443	60575	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.808866978 CEST	60575	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.808891058 CEST	443	60575	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.808948994 CEST	443	60575	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.808998108 CEST	60575	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.809021950 CEST	60575	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.809021950 CEST	60575	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.809037924 CEST	443	60575	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.809046984 CEST	443	60575	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.810750961 CEST	60581	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.810777903 CEST	443	60581	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.810894012 CEST	60581	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.810894012 CEST	60582	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.810925007 CEST	443	60582	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.811008930 CEST	60581	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.811017990 CEST	443	60581	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.811038971 CEST	60582	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.811156988 CEST	60582	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.811175108 CEST	443	60582	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.822000027 CEST	443	60576	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.822056055 CEST	443	60576	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.822165966 CEST	60576	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.822176933 CEST	443	60576	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.822231054 CEST	443	60576	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.822284937 CEST	60576	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.822325945 CEST	60576	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.822333097 CEST	443	60576	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.822341919 CEST	60576	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.822348118 CEST	443	60576	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.824254036 CEST	60583	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.824297905 CEST	443	60583	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:25.824372053 CEST	60583	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.824476004 CEST	60583	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:25.824490070 CEST	443	60583	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.517043114 CEST	443	60579	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.517512083 CEST	60579	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.517548084 CEST	443	60579	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.517936945 CEST	60579	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.517942905 CEST	443	60579	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.586220980 CEST	443	60580	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.586669922 CEST	60580	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.586774111 CEST	443	60580	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.587014914 CEST	60580	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.587029934 CEST	443	60580	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.595252991 CEST	443	60582	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.595591068 CEST	60582	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.595606089 CEST	443	60582	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.595935106 CEST	60582	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.595942974 CEST	443	60582	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.600919008 CEST	443	60581	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.601267099 CEST	60581	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.601275921 CEST	443	60581	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.601707935 CEST	60581	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.601712942 CEST	443	60581	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.619488955 CEST	443	60583	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.619904041 CEST	60583	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.619937897 CEST	443	60583	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.620302916 CEST	60583	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.620313883 CEST	443	60583	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.661160946 CEST	443	60579	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.661232948 CEST	443	60579	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.661307096 CEST	60579	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.661338091 CEST	443	60579	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.661385059 CEST	443	60579	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.661470890 CEST	60579	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.661586046 CEST	60579	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.661602974 CEST	443	60579	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.661617041 CEST	60579	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.661623955 CEST	443	60579	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.664068937 CEST	60584	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.664108992 CEST	443	60584	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.664274931 CEST	60584	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.664412975 CEST	60584	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.664426088 CEST	443	60584	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.718157053 CEST	443	60580	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.720395088 CEST	443	60580	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.720472097 CEST	60580	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.720587015 CEST	60580	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.720587969 CEST	60580	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.720648050 CEST	443	60580	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.720674038 CEST	443	60580	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.722824097 CEST	60585	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.722876072 CEST	443	60585	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.722950935 CEST	60585	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.723093033 CEST	60585	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.723109007 CEST	443	60585	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.729736090 CEST	443	60582	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.729882002 CEST	443	60582	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.730142117 CEST	60582	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.730329037 CEST	60582	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.730353117 CEST	443	60582	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.730371952 CEST	60582	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.730377913 CEST	443	60582	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.733463049 CEST	60586	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.733494997 CEST	443	60586	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.733575106 CEST	60586	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.733781099 CEST	60586	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.733795881 CEST	443	60586	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.735629082 CEST	443	60581	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.735658884 CEST	443	60581	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.735704899 CEST	443	60581	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.735747099 CEST	60581	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.735747099 CEST	60581	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.735954046 CEST	60581	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.735954046 CEST	60581	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.735960960 CEST	443	60581	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.735969067 CEST	443	60581	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.739295959 CEST	60587	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.739336014 CEST	443	60587	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.739603043 CEST	60587	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.739970922 CEST	60587	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.739988089 CEST	443	60587	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.757385969 CEST	443	60583	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.757451057 CEST	443	60583	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.757498980 CEST	443	60583	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.757514000 CEST	60583	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.757575035 CEST	60583	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.757747889 CEST	60583	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.757791996 CEST	443	60583	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.757822990 CEST	60583	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.757838964 CEST	443	60583	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.760006905 CEST	60588	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.760118961 CEST	443	60588	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:26.760210037 CEST	60588	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.760354996 CEST	60588	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:26.760371923 CEST	443	60588	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.429717064 CEST	443	60584	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.434484959 CEST	60584	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.434506893 CEST	443	60584	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.436625957 CEST	60584	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.436630964 CEST	443	60584	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.465106964 CEST	443	60585	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.465609074 CEST	60585	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.465641975 CEST	443	60585	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.466202021 CEST	60585	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.466207981 CEST	443	60585	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.488681078 CEST	443	60586	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.489283085 CEST	60586	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.489298105 CEST	443	60586	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.490833044 CEST	60586	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.490839005 CEST	443	60586	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.587201118 CEST	443	60584	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.587342978 CEST	443	60584	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.587400913 CEST	60584	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.587641954 CEST	60584	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.587656021 CEST	443	60584	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.587663889 CEST	60584	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.587668896 CEST	443	60584	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.590890884 CEST	443	60587	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.591069937 CEST	60589	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.591119051 CEST	443	60589	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.591314077 CEST	60589	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.591376066 CEST	60587	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.591387987 CEST	443	60587	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.591584921 CEST	60589	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.591597080 CEST	443	60589	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.592061996 CEST	60587	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.592066050 CEST	443	60587	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.593327045 CEST	443	60588	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.593751907 CEST	60588	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.593772888 CEST	443	60588	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.594347954 CEST	60588	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.594352961 CEST	443	60588	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.600703955 CEST	443	60585	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.600725889 CEST	443	60585	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.600763083 CEST	443	60585	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.600786924 CEST	60585	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.600828886 CEST	60585	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.601047039 CEST	60585	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.601066113 CEST	443	60585	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.601075888 CEST	60585	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.601083040 CEST	443	60585	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.604088068 CEST	60590	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.604101896 CEST	443	60590	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.604163885 CEST	60590	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.604338884 CEST	60590	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.604348898 CEST	443	60590	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.728967905 CEST	443	60587	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.729069948 CEST	443	60587	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.729214907 CEST	60587	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.729286909 CEST	60587	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.729304075 CEST	443	60587	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.729314089 CEST	60587	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.729324102 CEST	443	60587	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.732242107 CEST	60591	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.732280016 CEST	443	60591	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.732502937 CEST	60591	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.732700109 CEST	60591	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.732713938 CEST	443	60591	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.735764027 CEST	443	60588	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.735902071 CEST	443	60588	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.735964060 CEST	60588	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.735974073 CEST	443	60588	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.735999107 CEST	443	60588	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.736059904 CEST	60588	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.736076117 CEST	60588	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.736083031 CEST	443	60588	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.736104965 CEST	60588	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.736109018 CEST	443	60588	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.736120939 CEST	443	60586	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.736258984 CEST	443	60586	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.736325026 CEST	60586	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.736435890 CEST	60586	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.736455917 CEST	443	60586	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.736469030 CEST	60586	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.736479998 CEST	443	60586	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.739331007 CEST	60592	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.739367962 CEST	443	60592	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.739548922 CEST	60592	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.740166903 CEST	60593	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.740212917 CEST	443	60593	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.740312099 CEST	60593	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.740458012 CEST	60593	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.740473986 CEST	443	60593	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:27.740784883 CEST	60592	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:27.740807056 CEST	443	60592	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.339955091 CEST	443	60589	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.340627909 CEST	60589	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.340665102 CEST	443	60589	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.341237068 CEST	60589	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.341248989 CEST	443	60589	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.362181902 CEST	443	60590	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.362713099 CEST	60590	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.362749100 CEST	443	60590	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.363306046 CEST	60590	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.363318920 CEST	443	60590	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.470268011 CEST	443	60589	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.470431089 CEST	443	60589	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.470632076 CEST	60589	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.470762014 CEST	443	60591	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.471607924 CEST	60589	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.471626043 CEST	443	60589	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.472142935 CEST	443	60593	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.474653006 CEST	60591	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.474688053 CEST	443	60591	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.475615978 CEST	60591	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.475622892 CEST	443	60591	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.477077961 CEST	60593	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.477154970 CEST	443	60593	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.477947950 CEST	60593	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.477962017 CEST	443	60593	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.482739925 CEST	443	60592	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.487485886 CEST	60592	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.487505913 CEST	443	60592	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.488363028 CEST	60592	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.488368034 CEST	443	60592	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.488498926 CEST	60594	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.488562107 CEST	443	60594	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.488761902 CEST	60594	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.488944054 CEST	60594	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.488959074 CEST	443	60594	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.496488094 CEST	443	60590	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.496608019 CEST	443	60590	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.496670008 CEST	60590	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.496822119 CEST	60590	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.496829033 CEST	443	60590	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.496853113 CEST	60590	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.496859074 CEST	443	60590	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.499480963 CEST	60595	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.499510050 CEST	443	60595	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.499690056 CEST	60595	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.499877930 CEST	60595	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.499897957 CEST	443	60595	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.606421947 CEST	443	60591	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.606515884 CEST	443	60591	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.606589079 CEST	60591	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.606614113 CEST	443	60591	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.606646061 CEST	443	60591	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.606736898 CEST	60591	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.606779099 CEST	60591	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.606802940 CEST	443	60591	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.606817961 CEST	60591	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.606823921 CEST	443	60591	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.609304905 CEST	443	60593	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.610210896 CEST	443	60593	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.610259056 CEST	443	60593	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.610265017 CEST	60596	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.610287905 CEST	60593	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.610325098 CEST	443	60596	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.610375881 CEST	60593	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.610377073 CEST	60593	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.610377073 CEST	60593	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.610397100 CEST	60596	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.610652924 CEST	60596	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.610673904 CEST	443	60596	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.613281965 CEST	60597	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.613333941 CEST	443	60597	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.613428116 CEST	60597	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.613600969 CEST	60597	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.613616943 CEST	443	60597	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.620157957 CEST	443	60592	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.620290995 CEST	443	60592	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.620424032 CEST	60592	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.623409033 CEST	60592	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.623426914 CEST	443	60592	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.627079010 CEST	60598	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.627096891 CEST	443	60598	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.627165079 CEST	60598	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.627403021 CEST	60598	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.627415895 CEST	443	60598	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:28.911145926 CEST	60593	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:28.911230087 CEST	443	60593	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.250226021 CEST	443	60594	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.251049042 CEST	60594	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.251056910 CEST	443	60595	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.251113892 CEST	443	60594	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.251698017 CEST	60594	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.251713037 CEST	443	60594	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.252147913 CEST	60595	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.252159119 CEST	443	60595	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.252685070 CEST	60595	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.252690077 CEST	443	60595	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.360795975 CEST	443	60596	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.361737967 CEST	60596	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.361795902 CEST	443	60596	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.362858057 CEST	60596	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.362873077 CEST	443	60596	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.379498959 CEST	443	60598	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.379662037 CEST	443	60597	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.380096912 CEST	60598	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.380172968 CEST	443	60598	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.381150007 CEST	60598	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.381167889 CEST	443	60598	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.381637096 CEST	60597	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.381664038 CEST	443	60597	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.382281065 CEST	60597	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.382287025 CEST	443	60597	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.385348082 CEST	443	60594	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.385459900 CEST	443	60594	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.385550022 CEST	60594	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.386138916 CEST	60594	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.386184931 CEST	443	60594	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.386236906 CEST	60594	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.386253119 CEST	443	60594	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.387162924 CEST	443	60595	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.387248039 CEST	443	60595	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.387336969 CEST	60595	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.387556076 CEST	60595	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.387556076 CEST	60595	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.387576103 CEST	443	60595	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.387583971 CEST	443	60595	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.391491890 CEST	60599	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.391555071 CEST	443	60599	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.391619921 CEST	60599	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.391956091 CEST	60599	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.391985893 CEST	443	60599	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.393830061 CEST	60600	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.393870115 CEST	443	60600	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.393943071 CEST	60600	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.394088984 CEST	60600	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.394107103 CEST	443	60600	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.495225906 CEST	443	60596	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.495306015 CEST	443	60596	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.495394945 CEST	60596	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.495424986 CEST	443	60596	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.495465994 CEST	443	60596	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.495517969 CEST	60596	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.499850988 CEST	60596	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.499850988 CEST	60596	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.499880075 CEST	443	60596	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.499891996 CEST	443	60596	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.504331112 CEST	60601	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.504390001 CEST	443	60601	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.504468918 CEST	60601	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.507977962 CEST	60601	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.507994890 CEST	443	60601	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.513650894 CEST	443	60597	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.513828993 CEST	443	60597	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.514023066 CEST	60597	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.515016079 CEST	60597	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.515038013 CEST	443	60597	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.520437956 CEST	60602	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.520452976 CEST	443	60602	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.520535946 CEST	60602	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.521874905 CEST	443	60598	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.522067070 CEST	443	60598	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.522171021 CEST	60598	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.541579962 CEST	60598	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.541594982 CEST	443	60598	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.541620016 CEST	60598	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.541626930 CEST	443	60598	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.542337894 CEST	60602	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.542361021 CEST	443	60602	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.547838926 CEST	60603	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.547887087 CEST	443	60603	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:29.547951937 CEST	60603	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.548136950 CEST	60603	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:29.548151970 CEST	443	60603	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.132153988 CEST	443	60600	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.132800102 CEST	60600	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.132843018 CEST	443	60600	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.134596109 CEST	60600	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.134607077 CEST	443	60600	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.144838095 CEST	443	60599	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.145354033 CEST	60599	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.145384073 CEST	443	60599	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.150077105 CEST	60599	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.150094032 CEST	443	60599	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.243731022 CEST	443	60601	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.245820999 CEST	60601	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.245847940 CEST	443	60601	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.246464014 CEST	60601	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.246469021 CEST	443	60601	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.266262054 CEST	443	60600	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.266357899 CEST	443	60600	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.266560078 CEST	60600	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.266623974 CEST	60600	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.266644001 CEST	443	60600	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.266655922 CEST	60600	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.266661882 CEST	443	60600	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.271567106 CEST	60604	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.271615982 CEST	443	60604	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.271823883 CEST	60604	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.271941900 CEST	60604	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.271956921 CEST	443	60604	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.283942938 CEST	443	60599	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.284039021 CEST	443	60599	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.284181118 CEST	443	60599	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.284246922 CEST	60599	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.284285069 CEST	60599	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.284285069 CEST	60599	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.284301996 CEST	443	60599	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.284311056 CEST	443	60599	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.288789988 CEST	60605	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.288820982 CEST	443	60605	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.290894032 CEST	60605	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.291158915 CEST	60605	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.291167974 CEST	443	60605	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.300657034 CEST	443	60602	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.301156998 CEST	60602	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.301183939 CEST	443	60602	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.302124023 CEST	443	60603	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.302567959 CEST	60602	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.302577972 CEST	443	60602	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.303500891 CEST	60603	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.303524017 CEST	443	60603	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.304261923 CEST	60603	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.304267883 CEST	443	60603	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.376594067 CEST	443	60601	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.376637936 CEST	443	60601	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.376689911 CEST	443	60601	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.376703978 CEST	60601	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.376744986 CEST	60601	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.376882076 CEST	60601	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.376903057 CEST	443	60601	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.376915932 CEST	60601	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.376921892 CEST	443	60601	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.381958961 CEST	60606	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.381994009 CEST	443	60606	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.382903099 CEST	60606	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.383364916 CEST	60606	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.383374929 CEST	443	60606	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.445266962 CEST	443	60603	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.445416927 CEST	443	60603	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.445499897 CEST	60603	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.445652962 CEST	443	60602	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.445807934 CEST	443	60602	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.445813894 CEST	60603	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.445832968 CEST	443	60603	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.445889950 CEST	60602	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.448585033 CEST	60602	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.448602915 CEST	443	60602	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.448631048 CEST	60602	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.448637009 CEST	443	60602	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.451658964 CEST	60607	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.451699018 CEST	443	60607	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.452024937 CEST	60607	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.454004049 CEST	60607	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.454019070 CEST	443	60607	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.454068899 CEST	60608	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.454108000 CEST	443	60608	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:30.454170942 CEST	60608	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.454380035 CEST	60608	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:30.454396009 CEST	443	60608	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.008574009 CEST	443	60604	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.009141922 CEST	60604	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.009169102 CEST	443	60604	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.009620905 CEST	60604	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.009629011 CEST	443	60604	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.041794062 CEST	443	60605	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.042787075 CEST	60605	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.042815924 CEST	443	60605	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.043812037 CEST	60605	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.043822050 CEST	443	60605	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.137653112 CEST	443	60606	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.139142990 CEST	60606	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.139167070 CEST	443	60606	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.140247107 CEST	60606	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.140253067 CEST	443	60606	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.144448996 CEST	443	60604	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.144535065 CEST	443	60604	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.144639015 CEST	60604	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.144777060 CEST	60604	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.144795895 CEST	443	60604	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.144810915 CEST	60604	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.144817114 CEST	443	60604	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.151285887 CEST	60609	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.151340961 CEST	443	60609	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.151690960 CEST	60609	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.152162075 CEST	60609	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.152175903 CEST	443	60609	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.174709082 CEST	443	60605	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.174762964 CEST	443	60605	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.174845934 CEST	443	60605	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.174901009 CEST	60605	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.175273895 CEST	60605	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.175290108 CEST	443	60605	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.175303936 CEST	60605	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.175309896 CEST	443	60605	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.178210974 CEST	443	60607	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.180326939 CEST	60607	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.180345058 CEST	443	60607	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.181339979 CEST	60607	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.181344032 CEST	443	60607	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.184710979 CEST	60610	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.184753895 CEST	443	60610	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.184900045 CEST	60610	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.185250044 CEST	60610	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.185265064 CEST	443	60610	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.201699972 CEST	443	60608	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.205857038 CEST	60608	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.205882072 CEST	443	60608	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.206423044 CEST	60608	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.206429005 CEST	443	60608	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.269674063 CEST	443	60606	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.269782066 CEST	443	60606	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.269867897 CEST	60606	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.270059109 CEST	60606	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.270068884 CEST	443	60606	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.270078897 CEST	60606	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.270082951 CEST	443	60606	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.273113012 CEST	60611	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.273158073 CEST	443	60611	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.273341894 CEST	60611	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.273561954 CEST	60611	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.273572922 CEST	443	60611	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.305696964 CEST	443	60607	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.305737019 CEST	443	60607	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.305777073 CEST	443	60607	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.305839062 CEST	60607	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.306031942 CEST	60607	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.306047916 CEST	443	60607	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.309634924 CEST	60612	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.309655905 CEST	443	60612	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.309720993 CEST	60612	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.309904099 CEST	60612	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.309915066 CEST	443	60612	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.336755037 CEST	443	60608	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.336901903 CEST	443	60608	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.336978912 CEST	60608	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.337125063 CEST	60608	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.337138891 CEST	443	60608	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.337177992 CEST	60608	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.337182999 CEST	443	60608	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.340198040 CEST	60613	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.340234995 CEST	443	60613	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.340305090 CEST	60613	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.340481043 CEST	60613	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.340492010 CEST	443	60613	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.890578032 CEST	443	60609	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.908525944 CEST	60609	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.908579111 CEST	443	60609	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.909586906 CEST	60609	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.909603119 CEST	443	60609	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.946238041 CEST	443	60610	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.947082043 CEST	60610	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.947109938 CEST	443	60610	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:31.948003054 CEST	60610	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:31.948012114 CEST	443	60610	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.013966084 CEST	443	60611	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.014508963 CEST	60611	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.014540911 CEST	443	60611	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.015412092 CEST	60611	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.015419006 CEST	443	60611	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.037336111 CEST	443	60609	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.037365913 CEST	443	60609	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.037431955 CEST	443	60609	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.037488937 CEST	60609	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.037822962 CEST	60609	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.037858963 CEST	443	60609	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.037878990 CEST	60609	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.037889004 CEST	443	60609	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.044085979 CEST	60614	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.044130087 CEST	443	60614	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.044184923 CEST	60614	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.044692993 CEST	60614	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.044713020 CEST	443	60614	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.067600965 CEST	443	60612	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.068474054 CEST	60612	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.068506956 CEST	443	60612	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.069434881 CEST	60612	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.069442987 CEST	443	60612	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.077702045 CEST	443	60610	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.077795029 CEST	443	60610	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.077912092 CEST	60610	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.078381062 CEST	60610	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.078411102 CEST	443	60610	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.078428030 CEST	60610	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.078435898 CEST	443	60610	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.084248066 CEST	60615	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.084285975 CEST	443	60615	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.084522009 CEST	60615	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.084970951 CEST	60615	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.084989071 CEST	443	60615	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.087779999 CEST	443	60613	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.088512897 CEST	60613	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.088546991 CEST	443	60613	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.089231968 CEST	60613	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.089240074 CEST	443	60613	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.143857956 CEST	443	60611	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.143997908 CEST	443	60611	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.144062042 CEST	60611	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.144349098 CEST	60611	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.144372940 CEST	443	60611	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.144383907 CEST	60611	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.144390106 CEST	443	60611	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.150314093 CEST	60616	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.150356054 CEST	443	60616	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.150451899 CEST	60616	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.150759935 CEST	60616	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.150779009 CEST	443	60616	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.201157093 CEST	443	60612	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.201225996 CEST	443	60612	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.201297998 CEST	60612	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.201693058 CEST	60612	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.201713085 CEST	443	60612	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.207920074 CEST	60617	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.208014011 CEST	443	60617	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.208151102 CEST	60617	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.212160110 CEST	60617	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.212193966 CEST	443	60617	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.220681906 CEST	443	60613	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.220753908 CEST	443	60613	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.220817089 CEST	60613	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.220839024 CEST	443	60613	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.220863104 CEST	443	60613	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.220909119 CEST	60613	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.221127987 CEST	60613	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.221141100 CEST	443	60613	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.221154928 CEST	60613	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.221162081 CEST	443	60613	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.250626087 CEST	60618	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.250706911 CEST	443	60618	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.250897884 CEST	60618	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.251120090 CEST	60618	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.251168966 CEST	443	60618	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.778089046 CEST	443	60614	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.778589964 CEST	60614	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.778614998 CEST	443	60614	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.779180050 CEST	60614	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.779191017 CEST	443	60614	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.823663950 CEST	443	60615	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.824295998 CEST	60615	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.824331999 CEST	443	60615	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.824904919 CEST	60615	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.824918032 CEST	443	60615	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.879757881 CEST	443	60616	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.880489111 CEST	60616	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.880501986 CEST	443	60616	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.880908012 CEST	60616	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.880923986 CEST	443	60616	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.912411928 CEST	443	60614	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.912523985 CEST	443	60614	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.912581921 CEST	60614	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.912796974 CEST	60614	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.912816048 CEST	443	60614	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.912873030 CEST	60614	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.912878990 CEST	443	60614	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.916007042 CEST	60619	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.916044950 CEST	443	60619	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.916172981 CEST	60619	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.916300058 CEST	60619	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.916321993 CEST	443	60619	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.953372955 CEST	443	60617	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.953885078 CEST	60617	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.953917980 CEST	443	60617	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.954566956 CEST	60617	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.954574108 CEST	443	60617	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.955179930 CEST	443	60615	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.955749035 CEST	443	60615	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.955813885 CEST	60615	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.955872059 CEST	60615	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.955898046 CEST	443	60615	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.955913067 CEST	60615	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.955920935 CEST	443	60615	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.959142923 CEST	60620	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.959209919 CEST	443	60620	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.959295034 CEST	60620	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.959492922 CEST	60620	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.959510088 CEST	443	60620	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.982367039 CEST	443	60618	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.983474016 CEST	60618	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.983500004 CEST	443	60618	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:32.984910965 CEST	60618	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:32.984919071 CEST	443	60618	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.012165070 CEST	443	60616	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.012264967 CEST	443	60616	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.012609005 CEST	60616	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.012753963 CEST	60616	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.012779951 CEST	443	60616	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.012851000 CEST	60616	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.012859106 CEST	443	60616	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.015573978 CEST	60621	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.015624046 CEST	443	60621	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.015698910 CEST	60621	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.015842915 CEST	60621	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.015857935 CEST	443	60621	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.088258028 CEST	443	60617	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.088359118 CEST	443	60617	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.088490009 CEST	60617	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.088841915 CEST	60617	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.088886023 CEST	443	60617	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.089018106 CEST	60617	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.089035988 CEST	443	60617	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.093379021 CEST	60622	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.093425989 CEST	443	60622	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.093595982 CEST	60622	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.093770981 CEST	60622	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.093780041 CEST	443	60622	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.114105940 CEST	443	60618	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.114180088 CEST	443	60618	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.114312887 CEST	60618	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.115195990 CEST	60618	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.115220070 CEST	443	60618	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.115252018 CEST	60618	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.115259886 CEST	443	60618	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.121820927 CEST	60623	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.121876001 CEST	443	60623	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.121942997 CEST	60623	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.122270107 CEST	60623	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.122282982 CEST	443	60623	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.682549953 CEST	443	60619	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.683053970 CEST	60619	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.683072090 CEST	443	60619	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.683646917 CEST	60619	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.683656931 CEST	443	60619	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.718929052 CEST	443	60620	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.719497919 CEST	60620	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.719536066 CEST	443	60620	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.719921112 CEST	60620	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.719933033 CEST	443	60620	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.771238089 CEST	443	60621	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.771703005 CEST	60621	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.771724939 CEST	443	60621	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.772326946 CEST	60621	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.772334099 CEST	443	60621	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.818344116 CEST	443	60619	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.818403959 CEST	443	60619	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.818460941 CEST	60619	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.818681002 CEST	60619	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.818702936 CEST	443	60619	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.818779945 CEST	60619	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.818787098 CEST	443	60619	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.821702957 CEST	60624	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.821742058 CEST	443	60624	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.821799994 CEST	60624	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.822050095 CEST	60624	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.822062016 CEST	443	60624	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.836915970 CEST	443	60622	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.837412119 CEST	60622	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.837424994 CEST	443	60622	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.837965965 CEST	60622	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.837971926 CEST	443	60622	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.854268074 CEST	443	60620	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.854376078 CEST	443	60620	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.854439974 CEST	60620	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.854604959 CEST	60620	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.854628086 CEST	443	60620	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.854643106 CEST	60620	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.854650021 CEST	443	60620	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.857413054 CEST	60625	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.857470036 CEST	443	60625	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.857660055 CEST	60625	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.857810974 CEST	60625	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.857825994 CEST	443	60625	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.879662991 CEST	443	60623	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.880234957 CEST	60623	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.880264997 CEST	443	60623	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.880821943 CEST	60623	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.880835056 CEST	443	60623	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.908762932 CEST	443	60621	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.908793926 CEST	443	60621	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.908844948 CEST	443	60621	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.908854008 CEST	60621	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.908952951 CEST	60621	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.909099102 CEST	60621	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.909116983 CEST	443	60621	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.909132957 CEST	60621	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.909140110 CEST	443	60621	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.912583113 CEST	60626	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.912630081 CEST	443	60626	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.912745953 CEST	60626	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.912913084 CEST	60626	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.912930012 CEST	443	60626	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.969786882 CEST	443	60622	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.969860077 CEST	443	60622	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.971898079 CEST	60622	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.972275019 CEST	60622	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.972292900 CEST	443	60622	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.972306967 CEST	60622	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.972313881 CEST	443	60622	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.975445032 CEST	60627	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.975497961 CEST	443	60627	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:33.975702047 CEST	60627	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.976049900 CEST	60627	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:33.976064920 CEST	443	60627	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.012437105 CEST	443	60623	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.012470007 CEST	443	60623	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.012517929 CEST	443	60623	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.012527943 CEST	60623	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.012559891 CEST	60623	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.012734890 CEST	60623	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.012758970 CEST	443	60623	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.012773991 CEST	60623	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.012782097 CEST	443	60623	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.015403986 CEST	60628	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.015460014 CEST	443	60628	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.015527010 CEST	60628	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.015707970 CEST	60628	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.015723944 CEST	443	60628	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.579191923 CEST	443	60624	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.579709053 CEST	60624	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.579737902 CEST	443	60624	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.580171108 CEST	60624	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.580182076 CEST	443	60624	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.604784012 CEST	443	60625	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.605242014 CEST	60625	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.605272055 CEST	443	60625	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.605645895 CEST	60625	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.605655909 CEST	443	60625	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.655776024 CEST	443	60626	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.656244993 CEST	60626	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.656265974 CEST	443	60626	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.656677961 CEST	60626	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.656685114 CEST	443	60626	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.708611012 CEST	443	60624	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.708684921 CEST	443	60624	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.708822012 CEST	60624	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.708954096 CEST	60624	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.708973885 CEST	443	60624	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.708986044 CEST	60624	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.708992004 CEST	443	60624	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.711786985 CEST	60629	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.711838961 CEST	443	60629	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.712095976 CEST	60629	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.712265968 CEST	60629	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.712276936 CEST	443	60629	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.722409010 CEST	443	60627	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.722783089 CEST	60627	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.722805023 CEST	443	60627	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.723222017 CEST	60627	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.723231077 CEST	443	60627	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.737483025 CEST	443	60625	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.737515926 CEST	443	60625	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.737566948 CEST	443	60625	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.737620115 CEST	60625	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.737665892 CEST	60625	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.737723112 CEST	60625	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.737740993 CEST	443	60625	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.737754107 CEST	60625	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.737761974 CEST	443	60625	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.740381956 CEST	60630	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.740416050 CEST	443	60630	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.742898941 CEST	60630	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.743107080 CEST	60630	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.743118048 CEST	443	60630	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.768059969 CEST	443	60628	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.768537998 CEST	60628	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.768568993 CEST	443	60628	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.768958092 CEST	60628	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.768970966 CEST	443	60628	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.786742926 CEST	443	60626	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.786847115 CEST	443	60626	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.787045956 CEST	60626	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.787189007 CEST	60626	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.787205935 CEST	443	60626	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.787209034 CEST	60626	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.787215948 CEST	443	60626	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.789463043 CEST	60631	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.789510012 CEST	443	60631	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.789658070 CEST	60631	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.789769888 CEST	60631	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.789787054 CEST	443	60631	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.862592936 CEST	443	60627	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.862688065 CEST	443	60627	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.862843037 CEST	60627	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.862898111 CEST	60627	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.862914085 CEST	443	60627	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.862926960 CEST	60627	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.862931967 CEST	443	60627	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.865487099 CEST	60632	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.865524054 CEST	443	60632	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.865621090 CEST	60632	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.865813017 CEST	60632	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.865822077 CEST	443	60632	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.920094967 CEST	443	60628	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.920389891 CEST	443	60628	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.920479059 CEST	60628	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.920519114 CEST	60628	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.920538902 CEST	443	60628	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.920553923 CEST	60628	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.920561075 CEST	443	60628	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.923007011 CEST	60633	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.923055887 CEST	443	60633	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:34.923120975 CEST	60633	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.923376083 CEST	60633	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:34.923398018 CEST	443	60633	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.449337959 CEST	443	60629	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.449990034 CEST	60629	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.450021982 CEST	443	60629	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.450464010 CEST	60629	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.450469971 CEST	443	60629	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.492376089 CEST	443	60630	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.492935896 CEST	60630	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.492960930 CEST	443	60630	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.494173050 CEST	60630	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.494188070 CEST	443	60630	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.529865980 CEST	443	60631	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.530303001 CEST	60631	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.530364037 CEST	443	60631	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.530724049 CEST	60631	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.530739069 CEST	443	60631	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.578557968 CEST	443	60629	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.578589916 CEST	443	60629	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.578640938 CEST	443	60629	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.578641891 CEST	60629	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.578684092 CEST	60629	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.578898907 CEST	60629	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.578918934 CEST	443	60629	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.578938961 CEST	60629	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.578946114 CEST	443	60629	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.581773996 CEST	60634	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.581821918 CEST	443	60634	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.581883907 CEST	60634	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.582046032 CEST	60634	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.582062960 CEST	443	60634	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.606050014 CEST	443	60632	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.606556892 CEST	60632	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.606606007 CEST	443	60632	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.607198000 CEST	60632	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.607217073 CEST	443	60632	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.624413967 CEST	443	60630	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.624500036 CEST	443	60630	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.624552965 CEST	60630	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.624792099 CEST	60630	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.624813080 CEST	443	60630	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.624825001 CEST	60630	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.624830961 CEST	443	60630	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.627815962 CEST	60635	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.627907038 CEST	443	60635	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.627990961 CEST	60635	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.628142118 CEST	60635	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.628174067 CEST	443	60635	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.655786037 CEST	443	60633	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.656281948 CEST	60633	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.656313896 CEST	443	60633	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.656721115 CEST	60633	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.656725883 CEST	443	60633	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.659887075 CEST	443	60631	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.659966946 CEST	443	60631	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.660026073 CEST	60631	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.660129070 CEST	60631	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.660151005 CEST	443	60631	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.660166025 CEST	60631	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.660171032 CEST	443	60631	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.667982101 CEST	60636	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.668070078 CEST	443	60636	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.668180943 CEST	60636	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.668417931 CEST	60636	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.668453932 CEST	443	60636	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.735687017 CEST	443	60632	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.735774994 CEST	443	60632	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.735833883 CEST	60632	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.735872984 CEST	443	60632	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.736028910 CEST	60632	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.736052990 CEST	443	60632	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.736078978 CEST	60632	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.736123085 CEST	443	60632	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.738749981 CEST	60637	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.738787889 CEST	443	60637	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.738851070 CEST	60637	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.739002943 CEST	60637	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.739023924 CEST	443	60637	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.780616999 CEST	443	60633	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.780723095 CEST	443	60633	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.780781984 CEST	60633	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.780925989 CEST	60633	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.780925989 CEST	60633	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.780966043 CEST	443	60633	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.780994892 CEST	443	60633	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.783683062 CEST	60638	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.783718109 CEST	443	60638	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:35.783823967 CEST	60638	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.783977985 CEST	60638	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:35.783991098 CEST	443	60638	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.334892035 CEST	443	60634	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.340749979 CEST	60634	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.340830088 CEST	443	60634	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.341752052 CEST	60634	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.341769934 CEST	443	60634	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.399471998 CEST	443	60635	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.400135994 CEST	60635	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.400157928 CEST	443	60635	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.401146889 CEST	60635	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.401153088 CEST	443	60635	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.422240019 CEST	443	60636	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.423002005 CEST	60636	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.423037052 CEST	443	60636	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.424359083 CEST	60636	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.424376965 CEST	443	60636	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.467972040 CEST	443	60634	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.467999935 CEST	443	60634	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.468074083 CEST	443	60634	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.468080997 CEST	60634	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.468218088 CEST	60634	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.468424082 CEST	60634	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.468467951 CEST	443	60634	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.474946022 CEST	60639	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.475049019 CEST	443	60639	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.475136995 CEST	60639	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.475723028 CEST	60639	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.475759983 CEST	443	60639	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.504184961 CEST	443	60637	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.504864931 CEST	60637	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.504878998 CEST	443	60637	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.505856991 CEST	60637	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.505861998 CEST	443	60637	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.532355070 CEST	443	60635	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.532404900 CEST	443	60635	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.532459021 CEST	60635	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.532489061 CEST	443	60635	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.532552958 CEST	443	60635	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.532601118 CEST	60635	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.532829046 CEST	60635	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.532846928 CEST	443	60635	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.532860041 CEST	60635	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.532865047 CEST	443	60635	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.537060022 CEST	60640	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.537108898 CEST	443	60640	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.537178993 CEST	60640	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.537399054 CEST	60640	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.537431002 CEST	443	60640	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.546175957 CEST	443	60638	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.546919107 CEST	60638	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.546935081 CEST	443	60638	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.547800064 CEST	60638	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.547808886 CEST	443	60638	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.552113056 CEST	443	60636	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.552140951 CEST	443	60636	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.552198887 CEST	60636	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.552248001 CEST	443	60636	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.552277088 CEST	443	60636	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.552323103 CEST	60636	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.552686930 CEST	60636	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.552722931 CEST	443	60636	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.552761078 CEST	60636	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.552777052 CEST	443	60636	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.555629969 CEST	60641	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.555661917 CEST	443	60641	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.555864096 CEST	60641	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.556054115 CEST	60641	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.556063890 CEST	443	60641	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.638932943 CEST	443	60637	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.638962984 CEST	443	60637	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.639034033 CEST	443	60637	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.639075994 CEST	60637	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.639075994 CEST	60637	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.639429092 CEST	60637	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.639451981 CEST	443	60637	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.640140057 CEST	60637	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.640152931 CEST	443	60637	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.644279957 CEST	60642	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.644324064 CEST	443	60642	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.644505978 CEST	60642	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.644785881 CEST	60642	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.644802094 CEST	443	60642	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.675226927 CEST	443	60638	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.675420046 CEST	443	60638	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.675575972 CEST	60638	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.675818920 CEST	60638	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.675841093 CEST	443	60638	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.683156967 CEST	60643	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.683212996 CEST	443	60643	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:36.683340073 CEST	60643	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.683607101 CEST	60643	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:36.683624983 CEST	443	60643	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.227188110 CEST	443	60639	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.227699041 CEST	60639	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.227740049 CEST	443	60639	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.228132010 CEST	60639	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.228140116 CEST	443	60639	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.272964001 CEST	443	60640	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.273511887 CEST	60640	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.273525000 CEST	443	60640	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.273967981 CEST	60640	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.273972988 CEST	443	60640	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.283489943 CEST	443	60641	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.283889055 CEST	60641	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.283930063 CEST	443	60641	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.284394026 CEST	60641	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.284416914 CEST	443	60641	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.359672070 CEST	443	60639	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.359740019 CEST	443	60639	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.359791040 CEST	60639	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.359970093 CEST	60639	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.359997988 CEST	443	60639	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.360013962 CEST	60639	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.360021114 CEST	443	60639	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.362874985 CEST	60644	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.362915993 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.362989902 CEST	60644	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.363147020 CEST	60644	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.363159895 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.385059118 CEST	443	60642	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.385447979 CEST	60642	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.385479927 CEST	443	60642	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.386128902 CEST	60642	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.386151075 CEST	443	60642	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.404839993 CEST	443	60640	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.404915094 CEST	443	60640	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.404963017 CEST	60640	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.405102015 CEST	60640	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.405102015 CEST	60640	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.405121088 CEST	443	60640	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.405132055 CEST	443	60640	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.407800913 CEST	60645	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.407851934 CEST	443	60645	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.407922029 CEST	60645	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.408077955 CEST	60645	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.408090115 CEST	443	60645	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.414807081 CEST	443	60641	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.414916039 CEST	443	60641	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.414958000 CEST	60641	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.415256977 CEST	60641	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.415283918 CEST	443	60641	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.415388107 CEST	60641	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.415395021 CEST	443	60641	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.417294979 CEST	443	60643	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.417814970 CEST	60643	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.417824030 CEST	443	60643	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.418586969 CEST	60643	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.418591976 CEST	443	60643	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.420186996 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.420198917 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.420257092 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.420634031 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.420643091 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.532824039 CEST	443	60642	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.532850027 CEST	443	60642	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.532892942 CEST	60642	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.532910109 CEST	443	60642	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.532919884 CEST	443	60642	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.532946110 CEST	60642	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.532979012 CEST	60642	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.533358097 CEST	60642	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.533370972 CEST	443	60642	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.539963007 CEST	60647	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.540002108 CEST	443	60647	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.540055037 CEST	60647	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.540699005 CEST	60647	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.540710926 CEST	443	60647	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.549129009 CEST	443	60643	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.549211979 CEST	443	60643	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.549272060 CEST	443	60643	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.549272060 CEST	60643	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.549310923 CEST	60643	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.549436092 CEST	60643	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.549463987 CEST	443	60643	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.549491882 CEST	60643	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.549498081 CEST	443	60643	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.556304932 CEST	60648	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.556345940 CEST	443	60648	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:37.556402922 CEST	60648	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.556760073 CEST	60648	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:37.556771040 CEST	443	60648	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.084053040 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.093956947 CEST	60644	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.093985081 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.095096111 CEST	60644	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.095103025 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.143950939 CEST	443	60645	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.144680977 CEST	60645	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.144712925 CEST	443	60645	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.145276070 CEST	60645	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.145284891 CEST	443	60645	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.169491053 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.170228958 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.170247078 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.171055079 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.171061993 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.273705959 CEST	443	60645	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.273734093 CEST	443	60645	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.273797989 CEST	443	60645	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.273814917 CEST	60645	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.273858070 CEST	60645	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.274346113 CEST	60645	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.274347067 CEST	60645	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.274384975 CEST	443	60645	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.274410009 CEST	443	60645	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.278088093 CEST	60649	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.278136969 CEST	443	60649	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.278281927 CEST	60649	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.278573036 CEST	60649	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.278589010 CEST	443	60649	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.278995991 CEST	443	60648	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.279483080 CEST	60648	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.279561043 CEST	443	60648	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.280415058 CEST	60648	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.280430079 CEST	443	60648	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.284720898 CEST	443	60647	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.285219908 CEST	60647	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.285237074 CEST	443	60647	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.286034107 CEST	60647	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.286043882 CEST	443	60647	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.341383934 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.341413975 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.341430902 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.341469049 CEST	60644	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.341502905 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.341522932 CEST	60644	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.341548920 CEST	60644	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.342211008 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.342281103 CEST	60644	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.342288971 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.342303038 CEST	60644	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.342304945 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.342325926 CEST	60644	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.342329025 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.342341900 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.342360020 CEST	60644	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.342364073 CEST	443	60644	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.346122980 CEST	60650	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.346163988 CEST	443	60650	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.346313953 CEST	60650	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.346702099 CEST	60650	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.346716881 CEST	443	60650	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.413131952 CEST	443	60648	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.413193941 CEST	443	60648	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.413340092 CEST	60648	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.413366079 CEST	443	60648	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.413556099 CEST	443	60648	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.413618088 CEST	60648	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.413640022 CEST	60648	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.413655043 CEST	443	60648	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.413664103 CEST	60648	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.413669109 CEST	443	60648	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.416207075 CEST	60651	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.416234016 CEST	443	60651	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.416348934 CEST	60651	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.416510105 CEST	60651	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.416522026 CEST	443	60651	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.416985989 CEST	443	60647	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.417012930 CEST	443	60647	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.417068005 CEST	443	60647	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.417112112 CEST	60647	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.417138100 CEST	60647	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.417428970 CEST	60647	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.417443991 CEST	443	60647	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.417454004 CEST	60647	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.417459011 CEST	443	60647	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.419730902 CEST	60652	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.419761896 CEST	443	60652	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.419883966 CEST	60652	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.420151949 CEST	60652	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.420166016 CEST	443	60652	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.420178890 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.420239925 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.420284986 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.420310020 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.420342922 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.420378923 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.420401096 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.539001942 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.539083004 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.539102077 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.539129019 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.539158106 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.539182901 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.539261103 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.539334059 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.539376974 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.539422989 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.539423943 CEST	60646	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.539443016 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.539463997 CEST	443	60646	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.542118073 CEST	60653	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.542171955 CEST	443	60653	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:38.542270899 CEST	60653	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.542427063 CEST	60653	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:38.542447090 CEST	443	60653	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.018737078 CEST	443	60649	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.031347990 CEST	60649	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.031394958 CEST	443	60649	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.032746077 CEST	60649	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.032764912 CEST	443	60649	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.083483934 CEST	443	60650	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.088984013 CEST	60650	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.089020014 CEST	443	60650	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.089773893 CEST	60650	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.089778900 CEST	443	60650	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.151673079 CEST	443	60651	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.158468008 CEST	443	60652	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.161016941 CEST	60651	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.161041975 CEST	443	60651	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.162379980 CEST	443	60649	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.162458897 CEST	443	60649	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.162523985 CEST	60649	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.162914038 CEST	60651	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.162930012 CEST	443	60651	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.164079905 CEST	60652	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.164104939 CEST	443	60652	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.165301085 CEST	60652	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.165306091 CEST	443	60652	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.167223930 CEST	60649	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.167253971 CEST	443	60649	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.167269945 CEST	60649	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.167277098 CEST	443	60649	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.175041914 CEST	60655	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.175080061 CEST	443	60655	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.175141096 CEST	60655	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.175425053 CEST	60655	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.175434113 CEST	443	60655	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.215301991 CEST	443	60650	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.215378046 CEST	443	60650	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.215595007 CEST	60650	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.216023922 CEST	60650	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.216049910 CEST	443	60650	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.216068029 CEST	60650	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.216073990 CEST	443	60650	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.220534086 CEST	60656	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.220597029 CEST	443	60656	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.220658064 CEST	60656	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.221185923 CEST	60656	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.221201897 CEST	443	60656	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.285137892 CEST	443	60653	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.285892010 CEST	60653	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.285974026 CEST	443	60653	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.286792994 CEST	60653	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.286808014 CEST	443	60653	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.288901091 CEST	443	60651	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.288979053 CEST	443	60651	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.289037943 CEST	60651	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.289252996 CEST	60651	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.289273024 CEST	443	60651	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.290734053 CEST	443	60652	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.290878057 CEST	443	60652	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.290941954 CEST	60652	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.291089058 CEST	60652	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.291100025 CEST	443	60652	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.296680927 CEST	60657	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.296726942 CEST	443	60657	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.296886921 CEST	60657	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.298937082 CEST	60658	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.298960924 CEST	443	60658	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.299060106 CEST	60658	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.299166918 CEST	60657	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.299181938 CEST	443	60657	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.299258947 CEST	60658	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.299268961 CEST	443	60658	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.429856062 CEST	443	60653	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.429894924 CEST	443	60653	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.429963112 CEST	443	60653	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.429968119 CEST	60653	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.430387020 CEST	60653	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.431020975 CEST	60653	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.431072950 CEST	443	60653	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.431107998 CEST	60653	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.431126118 CEST	443	60653	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.968128920 CEST	443	60655	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.968626022 CEST	60655	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.968651056 CEST	443	60655	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.969152927 CEST	60655	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.969158888 CEST	443	60655	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.984035969 CEST	443	60656	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.984471083 CEST	60656	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.984502077 CEST	443	60656	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:39.984996080 CEST	60656	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:39.985006094 CEST	443	60656	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.088942051 CEST	443	60657	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.089476109 CEST	60657	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.089505911 CEST	443	60657	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.089901924 CEST	60657	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.089909077 CEST	443	60657	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.096374989 CEST	443	60658	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.096795082 CEST	60658	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.096813917 CEST	443	60658	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.097168922 CEST	60658	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.097174883 CEST	443	60658	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.102183104 CEST	443	60655	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.102271080 CEST	443	60655	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.102335930 CEST	60655	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.102569103 CEST	60655	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.102590084 CEST	443	60655	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.102601051 CEST	60655	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.102606058 CEST	443	60655	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.118978977 CEST	443	60656	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.119052887 CEST	443	60656	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.119102001 CEST	60656	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.120199919 CEST	60656	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.120234013 CEST	443	60656	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.120253086 CEST	60656	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.120260954 CEST	443	60656	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.223743916 CEST	443	60657	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.223824024 CEST	443	60657	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.223886013 CEST	60657	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.224306107 CEST	60657	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.224324942 CEST	443	60657	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.224335909 CEST	60657	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.224342108 CEST	443	60657	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.230390072 CEST	443	60658	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.230465889 CEST	443	60658	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.230600119 CEST	60658	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.230694056 CEST	60658	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.230711937 CEST	443	60658	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:40.230724096 CEST	60658	443	192.168.2.4	13.107.246.45
Oct 17, 2024 11:33:40.230729103 CEST	443	60658	13.107.246.45	192.168.2.4
Oct 17, 2024 11:33:59.118942022 CEST	60661	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:33:59.119064093 CEST	443	60661	142.250.185.196	192.168.2.4
Oct 17, 2024 11:33:59.119153976 CEST	60661	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:33:59.119563103 CEST	60661	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:33:59.119601965 CEST	443	60661	142.250.185.196	192.168.2.4
Oct 17, 2024 11:33:59.986083984 CEST	443	60661	142.250.185.196	192.168.2.4
Oct 17, 2024 11:33:59.986556053 CEST	60661	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:33:59.986624002 CEST	443	60661	142.250.185.196	192.168.2.4
Oct 17, 2024 11:33:59.987102985 CEST	443	60661	142.250.185.196	192.168.2.4
Oct 17, 2024 11:33:59.987529039 CEST	60661	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:33:59.987621069 CEST	443	60661	142.250.185.196	192.168.2.4
Oct 17, 2024 11:34:00.036017895 CEST	60661	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:34:09.971645117 CEST	443	60661	142.250.185.196	192.168.2.4
Oct 17, 2024 11:34:09.971716881 CEST	443	60661	142.250.185.196	192.168.2.4
Oct 17, 2024 11:34:09.971785069 CEST	60661	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:34:11.590692043 CEST	60661	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:34:11.590775013 CEST	443	60661	142.250.185.196	192.168.2.4
Oct 17, 2024 11:34:59.178193092 CEST	60663	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:34:59.178282976 CEST	443	60663	142.250.185.196	192.168.2.4
Oct 17, 2024 11:34:59.178359985 CEST	60663	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:34:59.178605080 CEST	60663	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:34:59.178636074 CEST	443	60663	142.250.185.196	192.168.2.4
Oct 17, 2024 11:35:00.065727949 CEST	443	60663	142.250.185.196	192.168.2.4
Oct 17, 2024 11:35:00.066006899 CEST	60663	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:35:00.066044092 CEST	443	60663	142.250.185.196	192.168.2.4
Oct 17, 2024 11:35:00.067145109 CEST	443	60663	142.250.185.196	192.168.2.4
Oct 17, 2024 11:35:00.067576885 CEST	60663	443	192.168.2.4	142.250.185.196
Oct 17, 2024 11:35:00.067759037 CEST	443	60663	142.250.185.196	192.168.2.4
Oct 17, 2024 11:35:00.114392996 CEST	60663	443	192.168.2.4	142.250.185.196

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 17, 2024 11:31:54.735933065 CEST	53	58563	1.1.1.1	192.168.2.4
Oct 17, 2024 11:31:54.938782930 CEST	53	52948	1.1.1.1	192.168.2.4
Oct 17, 2024 11:31:55.136634111 CEST	50340	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:31:55.136790037 CEST	59595	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:31:55.148037910 CEST	53	50340	1.1.1.1	192.168.2.4
Oct 17, 2024 11:31:55.152148008 CEST	53	59595	1.1.1.1	192.168.2.4
Oct 17, 2024 11:31:55.156126022 CEST	58985	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:31:55.169250965 CEST	53	58985	1.1.1.1	192.168.2.4
Oct 17, 2024 11:31:55.263370991 CEST	55715	53	192.168.2.4	8.8.8.8
Oct 17, 2024 11:31:55.263674021 CEST	55607	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:31:55.270324945 CEST	53	55607	1.1.1.1	192.168.2.4
Oct 17, 2024 11:31:55.270579100 CEST	53	55715	8.8.8.8	192.168.2.4
Oct 17, 2024 11:31:56.261111975 CEST	63373	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:31:56.261522055 CEST	50959	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:31:56.269403934 CEST	53	63373	1.1.1.1	192.168.2.4
Oct 17, 2024 11:31:56.273267031 CEST	53	50959	1.1.1.1	192.168.2.4
Oct 17, 2024 11:31:56.394980907 CEST	53	63908	1.1.1.1	192.168.2.4
Oct 17, 2024 11:31:59.005440950 CEST	64380	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:31:59.005547047 CEST	51663	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:31:59.013106108 CEST	53	64380	1.1.1.1	192.168.2.4
Oct 17, 2024 11:31:59.014878035 CEST	53	51663	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:01.280003071 CEST	55905	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:01.280380011 CEST	53133	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:01.291924000 CEST	53	53133	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:01.292490005 CEST	53	55905	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:01.293055058 CEST	62480	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:01.308796883 CEST	53	62480	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:01.319801092 CEST	49642	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:01.320390940 CEST	50892	53	192.168.2.4	8.8.8.8
Oct 17, 2024 11:32:01.327694893 CEST	53	49642	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:01.328136921 CEST	53	50892	8.8.8.8	192.168.2.4
Oct 17, 2024 11:32:06.343558073 CEST	62460	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:06.343724012 CEST	49280	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:06.355515957 CEST	53	62460	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:06.356908083 CEST	53	49280	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:06.387762070 CEST	56718	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:06.402904987 CEST	53	56718	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:06.565433025 CEST	53	58801	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:12.415687084 CEST	138	138	192.168.2.4	192.168.2.255
Oct 17, 2024 11:32:13.387984037 CEST	53	52121	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:14.566116095 CEST	53433	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:14.566266060 CEST	49520	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:14.577924967 CEST	53	49520	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:14.578893900 CEST	53	53433	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:14.579482079 CEST	49167	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:14.593358040 CEST	53	49167	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:14.607316017 CEST	50121	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:14.607590914 CEST	54130	53	192.168.2.4	8.8.8.8
Oct 17, 2024 11:32:14.614053011 CEST	53	50121	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:14.614994049 CEST	53	54130	8.8.8.8	192.168.2.4
Oct 17, 2024 11:32:28.493772984 CEST	61140	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:28.509368896 CEST	53	61140	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:32.297710896 CEST	53	49519	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:44.623733997 CEST	60980	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:44.623878002 CEST	64981	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:44.827231884 CEST	53	60980	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:44.833739996 CEST	53	64981	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:44.834465027 CEST	49651	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:32:44.846303940 CEST	53	49651	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:54.977185011 CEST	53	54268	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:55.021872044 CEST	53	54746	1.1.1.1	192.168.2.4
Oct 17, 2024 11:32:57.512134075 CEST	53	49874	1.1.1.1	192.168.2.4
Oct 17, 2024 11:33:04.843565941 CEST	55714	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:33:04.843910933 CEST	54195	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:33:04.853485107 CEST	53	54195	1.1.1.1	192.168.2.4
Oct 17, 2024 11:33:04.857332945 CEST	53	55714	1.1.1.1	192.168.2.4
Oct 17, 2024 11:33:04.857974052 CEST	56555	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:33:04.871360064 CEST	53	56555	1.1.1.1	192.168.2.4
Oct 17, 2024 11:33:04.884923935 CEST	58108	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:33:04.885238886 CEST	64619	53	192.168.2.4	8.8.8.8
Oct 17, 2024 11:33:04.892576933 CEST	53	58108	1.1.1.1	192.168.2.4
Oct 17, 2024 11:33:04.894768953 CEST	53	64619	8.8.8.8	192.168.2.4
Oct 17, 2024 11:34:04.900572062 CEST	62997	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:34:04.900823116 CEST	50849	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:34:04.914467096 CEST	53	50849	1.1.1.1	192.168.2.4
Oct 17, 2024 11:34:04.917329073 CEST	53	62997	1.1.1.1	192.168.2.4
Oct 17, 2024 11:34:04.918028116 CEST	62134	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:34:04.929672956 CEST	53	62134	1.1.1.1	192.168.2.4
Oct 17, 2024 11:34:08.344423056 CEST	55661	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:34:08.344727993 CEST	59190	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:34:08.354450941 CEST	53	55661	1.1.1.1	192.168.2.4
Oct 17, 2024 11:34:08.356796980 CEST	53	59190	1.1.1.1	192.168.2.4
Oct 17, 2024 11:34:08.372812986 CEST	56220	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:34:08.373116016 CEST	49561	53	192.168.2.4	8.8.8.8
Oct 17, 2024 11:34:08.380304098 CEST	53	56220	1.1.1.1	192.168.2.4
Oct 17, 2024 11:34:08.381170034 CEST	53	49561	8.8.8.8	192.168.2.4
Oct 17, 2024 11:34:51.124417067 CEST	53	62336	1.1.1.1	192.168.2.4
Oct 17, 2024 11:35:05.195620060 CEST	58886	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:35:05.195759058 CEST	62915	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:35:05.206811905 CEST	53	62915	1.1.1.1	192.168.2.4
Oct 17, 2024 11:35:05.208812952 CEST	53	58886	1.1.1.1	192.168.2.4
Oct 17, 2024 11:35:05.223098993 CEST	57547	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:35:05.234447002 CEST	53	57547	1.1.1.1	192.168.2.4
Oct 17, 2024 11:35:05.243249893 CEST	63762	53	192.168.2.4	1.1.1.1
Oct 17, 2024 11:35:05.243418932 CEST	54714	53	192.168.2.4	8.8.8.8
Oct 17, 2024 11:35:05.249999046 CEST	53	63762	1.1.1.1	192.168.2.4
Oct 17, 2024 11:35:05.251646996 CEST	53	54714	8.8.8.8	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 17, 2024 11:31:55.136634111 CEST	192.168.2.4	1.1.1.1	0x13cc	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:31:55.136790037 CEST	192.168.2.4	1.1.1.1	0xc9bb	Standard query (0)	4b7f334b.soar-1bq.pages.dev	65	IN (0x0001)	false
Oct 17, 2024 11:31:55.156126022 CEST	192.168.2.4	1.1.1.1	0x9160	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:31:55.263370991 CEST	192.168.2.4	8.8.8.8	0x875a	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:31:55.263674021 CEST	192.168.2.4	1.1.1.1	0x5685	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:31:56.261111975 CEST	192.168.2.4	1.1.1.1	0x102c	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:31:56.261522055 CEST	192.168.2.4	1.1.1.1	0x77a7	Standard query (0)	4b7f334b.soar-1bq.pages.dev	65	IN (0x0001)	false
Oct 17, 2024 11:31:59.005440950 CEST	192.168.2.4	1.1.1.1	0x3f33	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:31:59.005547047 CEST	192.168.2.4	1.1.1.1	0xab21	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 17, 2024 11:32:01.280003071 CEST	192.168.2.4	1.1.1.1	0xab62	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:01.280380011 CEST	192.168.2.4	1.1.1.1	0xd1e4	Standard query (0)	4b7f334b.soar-1bq.pages.dev	65	IN (0x0001)	false
Oct 17, 2024 11:32:01.293055058 CEST	192.168.2.4	1.1.1.1	0x1b7a	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:01.319801092 CEST	192.168.2.4	1.1.1.1	0x5f4	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:01.320390940 CEST	192.168.2.4	8.8.8.8	0x9dee	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:06.343558073 CEST	192.168.2.4	1.1.1.1	0x6e51	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:06.343724012 CEST	192.168.2.4	1.1.1.1	0xe059	Standard query (0)	4b7f334b.soar-1bq.pages.dev	65	IN (0x0001)	false
Oct 17, 2024 11:32:06.387762070 CEST	192.168.2.4	1.1.1.1	0x564e	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:14.566116095 CEST	192.168.2.4	1.1.1.1	0xf8e4	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:14.566266060 CEST	192.168.2.4	1.1.1.1	0xc0d0	Standard query (0)	4b7f334b.soar-1bq.pages.dev	65	IN (0x0001)	false
Oct 17, 2024 11:32:14.579482079 CEST	192.168.2.4	1.1.1.1	0xb6dd	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:14.607316017 CEST	192.168.2.4	1.1.1.1	0x33a4	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:14.607590914 CEST	192.168.2.4	8.8.8.8	0xbcfb	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:28.493772984 CEST	192.168.2.4	1.1.1.1	0x48a6	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:44.623733997 CEST	192.168.2.4	1.1.1.1	0x340c	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:44.623878002 CEST	192.168.2.4	1.1.1.1	0x89c6	Standard query (0)	4b7f334b.soar-1bq.pages.dev	65	IN (0x0001)	false
Oct 17, 2024 11:32:44.834465027 CEST	192.168.2.4	1.1.1.1	0x7485	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:33:04.843565941 CEST	192.168.2.4	1.1.1.1	0xfef3	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:33:04.843910933 CEST	192.168.2.4	1.1.1.1	0x349b	Standard query (0)	4b7f334b.soar-1bq.pages.dev	65	IN (0x0001)	false
Oct 17, 2024 11:33:04.857974052 CEST	192.168.2.4	1.1.1.1	0x319c	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:33:04.884923935 CEST	192.168.2.4	1.1.1.1	0x4e14	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:33:04.885238886 CEST	192.168.2.4	8.8.8.8	0xb4ff	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:34:04.900572062 CEST	192.168.2.4	1.1.1.1	0x3cde	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:34:04.900823116 CEST	192.168.2.4	1.1.1.1	0xe129	Standard query (0)	4b7f334b.soar-1bq.pages.dev	65	IN (0x0001)	false
Oct 17, 2024 11:34:04.918028116 CEST	192.168.2.4	1.1.1.1	0x1310	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:34:08.344423056 CEST	192.168.2.4	1.1.1.1	0xc312	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:34:08.344727993 CEST	192.168.2.4	1.1.1.1	0xc67b	Standard query (0)	4b7f334b.soar-1bq.pages.dev	65	IN (0x0001)	false
Oct 17, 2024 11:34:08.372812986 CEST	192.168.2.4	1.1.1.1	0xbfb7	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:34:08.373116016 CEST	192.168.2.4	8.8.8.8	0xfd8e	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:35:05.195620060 CEST	192.168.2.4	1.1.1.1	0xea5f	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:35:05.195759058 CEST	192.168.2.4	1.1.1.1	0xbde	Standard query (0)	4b7f334b.soar-1bq.pages.dev	65	IN (0x0001)	false
Oct 17, 2024 11:35:05.223098993 CEST	192.168.2.4	1.1.1.1	0x4a70	Standard query (0)	4b7f334b.soar-1bq.pages.dev	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:35:05.243249893 CEST	192.168.2.4	1.1.1.1	0x3389	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:35:05.243418932 CEST	192.168.2.4	8.8.8.8	0x6080	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 17, 2024 11:31:55.148037910 CEST	1.1.1.1	192.168.2.4	0x13cc	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:31:55.152148008 CEST	1.1.1.1	192.168.2.4	0xc9bb	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	65	IN (0x0001)	false
Oct 17, 2024 11:31:55.169250965 CEST	1.1.1.1	192.168.2.4	0x9160	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:31:55.270324945 CEST	1.1.1.1	192.168.2.4	0x5685	No error (0)	google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:31:55.270579100 CEST	8.8.8.8	192.168.2.4	0x875a	No error (0)	google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:31:56.269403934 CEST	1.1.1.1	192.168.2.4	0x102c	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:31:56.273267031 CEST	1.1.1.1	192.168.2.4	0x77a7	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	65	IN (0x0001)	false
Oct 17, 2024 11:31:59.013106108 CEST	1.1.1.1	192.168.2.4	0x3f33	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:31:59.014878035 CEST	1.1.1.1	192.168.2.4	0xab21	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 17, 2024 11:32:01.291924000 CEST	1.1.1.1	192.168.2.4	0xd1e4	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	65	IN (0x0001)	false
Oct 17, 2024 11:32:01.292490005 CEST	1.1.1.1	192.168.2.4	0xab62	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:01.308796883 CEST	1.1.1.1	192.168.2.4	0x1b7a	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:01.327694893 CEST	1.1.1.1	192.168.2.4	0x5f4	No error (0)	google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:01.328136921 CEST	8.8.8.8	192.168.2.4	0x9dee	No error (0)	google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:06.355515957 CEST	1.1.1.1	192.168.2.4	0x6e51	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:06.356908083 CEST	1.1.1.1	192.168.2.4	0xe059	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	65	IN (0x0001)	false
Oct 17, 2024 11:32:06.402904987 CEST	1.1.1.1	192.168.2.4	0x564e	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:14.577924967 CEST	1.1.1.1	192.168.2.4	0xc0d0	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	65	IN (0x0001)	false
Oct 17, 2024 11:32:14.578893900 CEST	1.1.1.1	192.168.2.4	0xf8e4	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:14.593358040 CEST	1.1.1.1	192.168.2.4	0xb6dd	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:14.614053011 CEST	1.1.1.1	192.168.2.4	0x33a4	No error (0)	google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:14.614994049 CEST	8.8.8.8	192.168.2.4	0xbcfb	No error (0)	google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:28.509368896 CEST	1.1.1.1	192.168.2.4	0x48a6	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:44.827231884 CEST	1.1.1.1	192.168.2.4	0x340c	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:44.833739996 CEST	1.1.1.1	192.168.2.4	0x89c6	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	65	IN (0x0001)	false
Oct 17, 2024 11:32:44.846303940 CEST	1.1.1.1	192.168.2.4	0x7485	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:32:48.407932997 CEST	1.1.1.1	192.168.2.4	0x2738	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 11:32:48.407932997 CEST	1.1.1.1	192.168.2.4	0x2738	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:33:04.853485107 CEST	1.1.1.1	192.168.2.4	0x349b	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	65	IN (0x0001)	false
Oct 17, 2024 11:33:04.857332945 CEST	1.1.1.1	192.168.2.4	0xfef3	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:33:04.871360064 CEST	1.1.1.1	192.168.2.4	0x319c	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:33:04.892576933 CEST	1.1.1.1	192.168.2.4	0x4e14	No error (0)	google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:33:04.894768953 CEST	8.8.8.8	192.168.2.4	0xb4ff	No error (0)	google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:34:04.914467096 CEST	1.1.1.1	192.168.2.4	0xe129	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	65	IN (0x0001)	false
Oct 17, 2024 11:34:04.917329073 CEST	1.1.1.1	192.168.2.4	0x3cde	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:34:04.929672956 CEST	1.1.1.1	192.168.2.4	0x1310	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:34:08.354450941 CEST	1.1.1.1	192.168.2.4	0xc312	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:34:08.356796980 CEST	1.1.1.1	192.168.2.4	0xc67b	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	65	IN (0x0001)	false
Oct 17, 2024 11:34:08.380304098 CEST	1.1.1.1	192.168.2.4	0xbfb7	No error (0)	google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:34:08.381170034 CEST	8.8.8.8	192.168.2.4	0xfd8e	No error (0)	google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:35:05.206811905 CEST	1.1.1.1	192.168.2.4	0xbde	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	65	IN (0x0001)	false
Oct 17, 2024 11:35:05.208812952 CEST	1.1.1.1	192.168.2.4	0xea5f	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:35:05.234447002 CEST	1.1.1.1	192.168.2.4	0x4a70	Name error (3)	4b7f334b.soar-1bq.pages.dev	none	none	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:35:05.249999046 CEST	1.1.1.1	192.168.2.4	0x3389	No error (0)	google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 17, 2024 11:35:05.251646996 CEST	8.8.8.8	192.168.2.4	0x6080	No error (0)	google.com		142.250.185.174	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:00 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-17 09:32:00 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=112426 Date: Thu, 17 Oct 2024 09:32:00 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:01 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-17 09:32:02 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=112416 Date: Thu, 17 Oct 2024 09:32:01 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-17 09:32:02 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:09 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pUEoG+9wPyGMs5V&MD=S8Lmrbpl HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-17 09:32:09 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 93b82934-376c-405b-96d9-7116d17815fa MS-RequestId: b0ba970b-8892-403f-84d8-49e007dab67e MS-CV: BIX9ws18O0iURPvH.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 17 Oct 2024 09:32:09 GMT Connection: close Content-Length: 24490
2024-10-17 09:32:09 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-17 09:32:09 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49753	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:47 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pUEoG+9wPyGMs5V&MD=S8Lmrbpl HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-17 09:32:48 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: e35344ce-9b50-4185-b60f-f4ad3c177cac MS-RequestId: c18cdd35-0e9d-47e1-a989-c8738aec3ff0 MS-CV: bYBhWnTskkmHUc/q.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 17 Oct 2024 09:32:47 GMT Connection: close Content-Length: 30005
2024-10-17 09:32:48 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-17 09:32:48 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:49 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:49 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:49 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 14 Oct 2024 13:20:05 GMT ETag: "0x8DCEC52EAEA89D6" x-ms-request-id: 841c68bc-001e-0014-43d9-1e5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093249Z-16b659b4499vb6rgub5604hgz0000000086g00000000fmfq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:49 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-17 09:32:49 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-17 09:32:49 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-17 09:32:49 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-17 09:32:49 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-17 09:32:50 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-17 09:32:50 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-17 09:32:50 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-17 09:32:50 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-17 09:32:50 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:51 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:51 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:51 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 2bfbe8ba-001e-00ad-34d8-1e554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093251Z-16b659b44999c8xwz4dbqvgykc0000000adg000000009tb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:32:51 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:51 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:51 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: fe1af26d-601e-00ab-11d8-1e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093251Z-16b659b44999mb85a5wquzbrz800000007gg00000000012d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:51 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:51 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:51 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c8d8f407-d01e-005a-22d8-1e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093251Z-16b659b4499wvth4ttszf0h3n40000000770000000005ff3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:51 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:51 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:51 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: b1f12986-201e-0085-35d8-1e34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093251Z-16b659b4499f5gh931bbxe97rs000000089g00000000eagc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:51 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:51 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:51 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 43a19f6a-101e-008e-12d8-1ecf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093251Z-r197bdfb6b4b582bwynewx7zgn00000001hg00000000bqxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:51 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:52 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 2b077638-201e-003c-08d8-1e30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093252Z-16b659b4499rgn6gzhcff90q8g00000009eg00000000ctt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:52 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:52 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 52ecfd05-901e-0029-01d8-1e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093252Z-16b659b44999mb85a5wquzbrz800000007g0000000000ysf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:52 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:52 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:52 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8dd1166a-301e-0000-49d8-1eeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093252Z-r197bdfb6b4b582bwynewx7zgn00000001h000000000dgnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:52 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:52 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:52 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: ad3de8e9-901e-0064-05d8-1ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093252Z-16b659b4499qzkzdaxyf40k2c000000008n0000000001sck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:52 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:52 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:52 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 68e1d423-f01e-005d-5bd8-1e13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093252Z-15b8d89586fnsf5zv100scmx10000000039g000000005ewx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:52 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:53 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:53 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0c01d776-601e-0084-1bd8-1e6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093253Z-15b8d89586fvk4kme36hucfwyc00000002b000000000aw7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:53 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:53 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:53 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 84133f47-001e-0014-21d8-1e5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093253Z-16b659b44994gzgd4bz42hx7vg00000008rg000000008bg8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:53 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:53 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:53 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 52ecab4f-901e-0029-78d8-1e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093253Z-16b659b44999c8xwz4dbqvgykc0000000ahg000000002q24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:53 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:53 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:53 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 2ef95996-601e-0070-2cd8-1ea0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093253Z-16b659b4499mk7vv3349cr2qug0000000axg000000001avh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:53 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:53 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:53 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:53 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: ad3e2c7c-901e-0064-12d8-1ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093253Z-16b659b4499vb6rgub5604hgz000000008dg0000000019hg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:53 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:54 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:54 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: c8d8fd2a-d01e-005a-5ad8-1e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093254Z-15b8d89586f42m67uh3prmsdrs00000003dg000000006vct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:54 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:54 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:54 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c8d8fd80-d01e-005a-2dd8-1e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093254Z-16b659b4499jjs4wp9fdvw3np800000009m0000000009pm9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:54 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:54 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:54 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 273fc7c4-701e-0098-0b92-1f395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093254Z-15b8d89586fnsf5zv100scmx1000000003ag000000004edw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:54 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:54 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:54 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0b49af96-c01e-0079-7092-1fe51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093254Z-15b8d89586f8l5967udr7u2zg400000001vg00000000ax9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:54 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:54 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:54 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 12ee0118-f01e-0003-4ed8-1e4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093254Z-r197bdfb6b4kzncfk35mqx2yu400000009qg0000000005c4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:54 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:55 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:55 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ff358c34-401e-0064-2ed8-1e54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093255Z-15b8d89586flspj6f2320qac94000000038000000000d9qx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:55 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:55 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 22e262fd-c01e-008d-23d8-1e2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093255Z-16b659b4499wvth4ttszf0h3n4000000077g000000004ey5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:55 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b1f4a3fb-201e-0085-44d8-1e34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093255Z-r197bdfb6b4kdv8k52pqueg71800000009ug000000004e42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:55 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:55 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 605c2aad-301e-003f-4fd8-1e266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093255Z-r197bdfb6b42sc4ddemybqpm1400000009u0000000001tgr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:55 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:55 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:55 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: a7506d0b-801e-0047-7ad8-1e7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093255Z-r197bdfb6b4rt57kw3q0f43mqg000000019g000000000ebr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:55 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:56 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 2516cf9d-e01e-003c-72d8-1ec70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093256Z-r197bdfb6b49hhzxb6arg8z9fw00000001f0000000008enm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:56 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:56 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: a14da665-f01e-003f-4ed8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093256Z-16b659b4499hn29ks1ddp5hvac0000000aw0000000007trp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:56 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:56 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:56 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 619deb8e-b01e-005c-5ed8-1e4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093256Z-16b659b44992vd4bkk50pmnxt00000000bg0000000005cz3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:56 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:56 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: ff35c8d8-401e-0064-01d8-1e54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093256Z-16b659b4499rgn6gzhcff90q8g00000009f000000000ct81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:56 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:56 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: dd484488-801e-0035-08d8-1e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093256Z-16b659b4499f5gh931bbxe97rs00000008bg00000000bnnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:56 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:57 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:57 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 51cf92de-b01e-0098-5cd8-1ecead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093257Z-r197bdfb6b49k6rshrw4zhxpu000000009pg000000008cms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:57 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:57 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:57 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 90ca98f1-701e-001e-52d8-1ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093257Z-16b659b44999c8xwz4dbqvgykc0000000akg000000000krq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:57 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:57 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:57 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 68e1e18e-f01e-005d-01d8-1e13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093257Z-16b659b4499t9g2t855zkdgzd00000000a0g00000000662g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:32:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:57 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:57 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a7eb38d6-901e-005b-12d8-1e2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093257Z-16b659b44999mb85a5wquzbrz800000007a000000000bre5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:57 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:57 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:57 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 20e65ee1-a01e-000d-7cd8-1ed1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093257Z-15b8d89586f42m67uh3prmsdrs00000003hg00000000090b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	60423	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:58 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:58 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 78411580-401e-00ac-1cd8-1e0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093258Z-r197bdfb6b4b582bwynewx7zgn00000001p000000000508n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:58 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	60427	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:58 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:58 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:58 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: d34f4f33-701e-0053-48d8-1e3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093258Z-16b659b4499r9jvzdsrvx9g86w00000007yg0000000060rs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:58 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	60425	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:58 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:58 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: fe1c9c5c-601e-00ab-47d8-1e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093258Z-16b659b4499qzkzdaxyf40k2c000000008g0000000008u1v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	60424	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:58 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:58 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 605d139a-301e-003f-0dd8-1e266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093258Z-r197bdfb6b4xcpkzeah6r2svr000000001b000000000ets0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:58 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	60426	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:58 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:58 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 405f50b6-601e-0050-5f97-1f2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093258Z-r197bdfb6b4lbgfqheuaxfm7xn00000005wg0000000080k6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:58 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	60431	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:59 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:59 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: b93b6c67-001e-0014-7192-1f5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093259Z-15b8d89586f8l5967udr7u2zg400000001t000000000bmq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:59 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	60433	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:59 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:59 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 279cc631-801e-00a3-30d8-1e7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093259Z-15b8d89586f57l94wp7c4y4r2w00000003gg000000001kz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:59 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	60434	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:59 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:59 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: c529dd24-301e-001f-72d8-1eaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093259Z-16b659b4499mk7vv3349cr2qug0000000atg000000008tyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:59 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	60432	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:59 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:59 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 20e60820-a01e-000d-5fd8-1ed1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093259Z-15b8d89586fwzdd8ab09pbrekn000000034000000000cr4g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:59 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	60435	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:32:59 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:32:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:32:59 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 6c57f1bb-d01e-0017-65d8-1eb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093259Z-16b659b4499rgn6gzhcff90q8g00000009k00000000063zy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:32:59 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	60437	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:00 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:00 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:00 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 9657db4b-301e-0099-40d8-1e6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093300Z-15b8d89586fst84k5f3z220tec00000003a0000000009yct x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:00 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	60438	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:00 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 3712cd75-d01e-0028-1b63-1f7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093300Z-15b8d89586fvk4kme36hucfwyc00000002e0000000005ebr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	60439	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:00 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: e0ad141f-c01e-0079-14d8-1ee51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093300Z-16b659b44994c5rr2b3ze9shcc00000008x0000000002qky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	60440	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:00 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: a14daed5-f01e-003f-49d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093300Z-16b659b4499sg56vuc9t9dmdq40000000bp0000000001a95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	60441	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:00 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:00 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9d0a8802-b01e-0001-3263-1f46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093300Z-15b8d89586fmhkw4gksnr1w3ds00000003ag000000009dne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:00 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	60442	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:00 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 43a08f38-101e-008e-79d8-1ecf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093301Z-15b8d89586fcvr6pym2snavm4w00000003ag00000000dq36 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	60443	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:01 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:01 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:01 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 52ed194d-901e-0029-34d8-1e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093301Z-16b659b4499wvth4ttszf0h3n40000000760000000007rrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:33:01 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	60444	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:01 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 862ca826-e01e-0071-55d8-1e08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093301Z-r197bdfb6b49hhzxb6arg8z9fw00000001fg000000007hpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	60445	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:01 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: dd489f40-801e-0035-5bd8-1e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093301Z-15b8d89586f989rks44whx5v7s00000003ag00000000dcc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	60446	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:01 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:01 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1edf1d90-301e-000c-38d8-1e323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093301Z-16b659b4499xhcppz4ucy307n400000007eg000000003wyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:01 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	60448	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:01 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:02 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 51cf9ae0-b01e-0098-63d8-1ecead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093302Z-r197bdfb6b4kq4j58bsux2hzu000000005x00000000080f1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:02 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	60450	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:01 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: fc93da61-c01e-00ad-10d8-1ea2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093302Z-r197bdfb6b49q495mwvq3xv6v000000009q0000000005dxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	60447	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:01 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:02 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: ce01be1f-401e-0035-389d-1f82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093302Z-r197bdfb6b4b582bwynewx7zgn00000001gg00000000etpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:02 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	60449	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:01 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:02 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 90caf802-701e-001e-1cd8-1ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093302Z-16b659b4499bnwsctrq8dt6ghw00000008800000000001zs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:02 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	60451	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:01 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:02 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:01 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c7f33fb6-601e-003d-2ed8-1e6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093301Z-16b659b4499tswxxb16erk3cdn00000009zg00000000d4f8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:02 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	60454	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:02 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:02 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: edd4371e-d01e-0028-3cd8-1e7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093302Z-r197bdfb6b4vlqfn9hfre6k1s800000001d000000000d7gn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:02 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	60455	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:02 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:02 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 8d8985e4-f01e-0085-0bd8-1e88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093302Z-16b659b44998rw28css0tq67fn0000000aug00000000f02e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:02 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	60452	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:02 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9dcec3f4-001e-002b-5ad8-1e99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093302Z-16b659b44999c8xwz4dbqvgykc0000000ac000000000dd18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	60453	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:02 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8dd076ce-301e-0000-26d8-1eeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093302Z-r197bdfb6b4vlqfn9hfre6k1s800000001f0000000009k4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:03 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	60456	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:02 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:02 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: a14db6d3-f01e-003f-58d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093302Z-16b659b4499j4zt514u3dvn84n0000000aqg0000000058bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:03 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	60457	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:03 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 2ef97557-601e-0070-42d8-1ea0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093303Z-16b659b4499f5gh931bbxe97rs00000008e0000000005wur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	60458	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:03 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:03 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 7b3b5240-301e-0020-2292-1f6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093303Z-15b8d89586fqj7k5uht6e8nnew000000037g0000000051hm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:03 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	60459	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:03 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:03 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 2bfc10a8-001e-00ad-20d8-1e554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093303Z-16b659b4499k2xzwvf7uk78sfs0000000a9g00000000c4fg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:03 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	60460	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:03 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:03 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:03 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: c8d91fae-d01e-005a-7cd8-1e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093303Z-16b659b4499gfl4fdbx49yxptw0000000b9000000000akxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:33:03 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	60461	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:03 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:03 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:03 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: d4bc84b0-b01e-0097-04d8-1e4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093303Z-15b8d89586fzhrwg5nzgg1z60000000003e0000000001ugf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:03 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	60462	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:04 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 2ef97735-601e-0070-7dd8-1ea0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093304Z-16b659b44999c8xwz4dbqvgykc0000000ahg000000002qah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	60463	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:04 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 96579733-301e-0099-3cd8-1e6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093304Z-16b659b44999mb85a5wquzbrz800000007a000000000brp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	60464	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:04 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:04 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: bbc7cdf8-401e-0029-6004-209b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093304Z-15b8d89586f4zwgbz365q03b0c000000037g00000000f8rt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:04 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	60465	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:04 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:04 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: e480f9bd-101e-0017-1cd8-1e47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093304Z-r197bdfb6b4kkrkjmxpfy2et1000000009sg000000002d5m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:04 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	60466	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:04 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:04 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 506964a9-f01e-0085-7218-2088ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093304Z-15b8d89586f8l5967udr7u2zg400000001v0000000009g8f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:04 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	60467	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:05 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:06 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: ed28a2ad-d01e-008e-4f7e-1f387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093306Z-r197bdfb6b4h2vct0gzb37213s000000098g00000000bpeh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:06 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	60470	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:05 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:06 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:05 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: fe1cb938-601e-00ab-39d8-1e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093305Z-16b659b44992vd4bkk50pmnxt00000000bkg000000000bu2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:33:06 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	60471	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:05 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:06 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:05 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: a14e0622-f01e-003f-07d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093305Z-16b659b4499stprh7pcpsc0x3n0000000ah000000000bpwk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:33:06 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	60469	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:05 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:05 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 2ef97973-601e-0070-1bd8-1ea0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093305Z-r197bdfb6b4h2vct0gzb37213s0000000990000000009x13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:06 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	60468	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:05 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:06 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 619e0788-b01e-005c-44d8-1e4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093306Z-15b8d89586ffsjj9k4kx5hcf3w0000000370000000003wcs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:06 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	60472	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:06 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:06 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: f8617515-201e-0071-0ed8-1eff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093306Z-16b659b4499lfw4zscvav76bhn0000000830000000002zy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:06 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	60474	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:06 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:06 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:06 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 746ae867-101e-00a2-15d8-1e9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093306Z-16b659b4499mk7vv3349cr2qug0000000axg000000001b8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:33:06 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	60473	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:06 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:06 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 619f2964-b01e-005c-1cd8-1e4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093306Z-16b659b4499tswxxb16erk3cdn0000000a0000000000c8nn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:06 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	60476	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:06 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:06 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 59a6cbd7-d01e-0065-41d8-1eb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093306Z-15b8d89586f6nn8zwfkdy3t04s000000035g000000009cc7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:06 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	60475	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:06 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:06 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: a14e0af2-f01e-003f-22d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093306Z-15b8d89586f989rks44whx5v7s00000003b000000000bg07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:06 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	60477	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:07 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:07 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: caad473b-c01e-0034-52d8-1e2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093307Z-16b659b4499v5jm96nrcwszga000000008800000000077d7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:07 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	60479	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:07 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:07 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: bad49cb7-701e-0097-62d8-1eb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093307Z-r197bdfb6b4b582bwynewx7zgn00000001q00000000031az x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:07 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	60478	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:07 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:07 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 52eece22-901e-0029-4cd8-1e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093307Z-16b659b4499stprh7pcpsc0x3n0000000akg000000008bzn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:07 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	60481	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:07 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:07 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 3d354aa7-b01e-0001-62d8-1e46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093307Z-15b8d89586fdmfsgn8gw8tkkbc000000034000000000an88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:07 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	60480	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:07 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:07 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: b1f1ba8d-201e-0085-49d8-1e34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093307Z-16b659b4499hn29ks1ddp5hvac0000000av000000000a1cu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:07 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	60482	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:08 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:08 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 338a1818-c01e-00a2-36d8-1e2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093308Z-16b659b4499j6g8p9q09hdsh1000000008w000000000c1h6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:08 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	60483	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:08 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:08 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: caae80db-c01e-0034-21d8-1e2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093308Z-r197bdfb6b4h2vct0gzb37213s00000009b0000000006cgd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:08 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	60485	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:08 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:08 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: db3d69cc-a01e-0070-02d8-1e573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093308Z-r197bdfb6b4cz6xrsdncwtgzd400000009tg000000005fw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:08 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	60484	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:08 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:08 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 20e62c17-a01e-000d-57d8-1ed1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093308Z-16b659b44994c5rr2b3ze9shcc00000008w00000000048z6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:08 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	60486	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:08 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:08 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:08 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 7ef1cc09-e01e-0051-19d8-1e84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093308Z-16b659b4499rgn6gzhcff90q8g00000009e000000000d5nm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:33:08 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	60489	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:09 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:09 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: ce46a1eb-f01e-0099-7ad8-1e9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093309Z-r197bdfb6b4lbgfqheuaxfm7xn00000005ug00000000b88m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:09 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	60488	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:09 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:09 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 4d3d3a44-601e-0070-6c92-1fa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093309Z-15b8d89586fst84k5f3z220tec000000039g00000000av00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:09 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	60491	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:09 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:09 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 783e43a6-401e-00ac-1ad8-1e0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093309Z-16b659b4499pnh69zuen6a54mc00000008vg00000000d93w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:09 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	60487	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:09 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:09 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 6abdcc9e-401e-00ac-2b92-1f0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093309Z-15b8d89586fst84k5f3z220tec00000003a0000000009yq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:09 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	60490	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:09 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:09 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:09 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 2b07ac6c-201e-003c-64d8-1e30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093309Z-16b659b4499j6g8p9q09hdsh1000000008w000000000c1ht x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:09 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	60494	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:10 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:10 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 3f38a2ce-801e-0015-6cd9-1ef97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093310Z-r197bdfb6b4h2vct0gzb37213s00000009eg000000000ag8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:10 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	60492	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:10 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:10 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:10 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: a14dcc21-f01e-003f-11d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093310Z-16b659b44994c5rr2b3ze9shcc00000008s000000000bw5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:33:10 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	60495	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:10 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:10 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2a29193b-001e-0065-3fd8-1e0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093310Z-16b659b4499j6gq7pkfa2qzkk400000008hg00000000ett8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:10 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	60496	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:10 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:10 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:10 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 90cb1d1e-701e-001e-57d8-1ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093310Z-16b659b4499v5jm96nrcwszga000000008a0000000003b1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:33:10 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	60493	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:10 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:10 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: e1d8db9a-401e-0048-7bd8-1e0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093310Z-15b8d89586fnsf5zv100scmx1000000003bg0000000024f6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:10 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	60501	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:11 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:11 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 90cac500-701e-001e-74d8-1ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093311Z-16b659b4499w2mwkzdhtwtt78c0000000a8g000000002mxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:11 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	60498	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:11 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:11 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 4f3c0613-901e-0083-7ed8-1ebb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093311Z-16b659b44999c8xwz4dbqvgykc0000000ac000000000ddcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:11 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	60499	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:11 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:11 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: f36390f8-001e-00a2-0e96-1fd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093311Z-15b8d89586f8nxpt6pvtkfw3pg00000003a000000000581w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:11 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	60500	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:11 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:11 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: a235b62e-001e-0082-0cd8-1e5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093311Z-16b659b44998rw28css0tq67fn0000000ay0000000008kfa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:11 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	60497	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:11 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:11 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: b1f1651c-201e-0085-16d8-1e34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093311Z-16b659b4499qzkzdaxyf40k2c000000008n0000000001stv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:11 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	60502	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:12 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:12 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: a14f1cd6-f01e-003f-2ad8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093312Z-16b659b4499k2xzwvf7uk78sfs0000000ag0000000000348 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:12 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	60504	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:12 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:12 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:12 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: d6ae7f49-501e-008c-58d8-1ecd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093312Z-16b659b4499t9g2t855zkdgzd000000009wg00000000evp4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:12 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	60503	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:12 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:12 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 783e4b83-401e-00ac-1cd8-1e0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093312Z-16b659b4499t9g2t855zkdgzd000000009xg00000000buzp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:12 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	60506	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:12 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:12 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 90cac76b-701e-001e-3bd8-1ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093312Z-16b659b4499vb6rgub5604hgz0000000089000000000905w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:12 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	60505	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:12 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:12 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 3f0734e1-f01e-0071-0c92-1f431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093312Z-15b8d89586fx2hlt035xdehq5800000003eg000000005kfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:12 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	60508	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:13 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:13 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 038d01e8-201e-00aa-60d8-1e3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093313Z-16b659b449999m8hsuhyf00exs00000009kg000000005hmw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:13 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	60509	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:13 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:13 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 2ef9462c-601e-0070-27d8-1ea0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093313Z-16b659b4499mcktpfn1m4deuag00000007f000000000csps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:13 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	60510	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:13 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:13 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 7ef379bb-e01e-0051-73d8-1e84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093313Z-r197bdfb6b4b582bwynewx7zgn00000001q00000000031fq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:13 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	60511	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:13 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:13 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: d4bb9dbe-001e-0028-7a08-20c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093313Z-15b8d89586f6nn8zwfkdy3t04s00000003a0000000000p7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:13 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	60512	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:13 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:13 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: a7e9f50c-901e-005b-39d8-1e2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093313Z-16b659b4499mcktpfn1m4deuag00000007kg0000000068a6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:13 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	60515	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:14 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:14 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 10952a79-501e-007b-7ed8-1e5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093314Z-15b8d89586f57l94wp7c4y4r2w00000003b000000000b73c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:14 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	60513	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:14 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:14 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 90cacb5b-701e-001e-72d8-1ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093314Z-16b659b4499t9g2t855zkdgzd00000000a20000000003nut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:14 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	60516	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:14 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:14 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 0c00f04d-601e-0084-4dd8-1e6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093314Z-16b659b4499k2xzwvf7uk78sfs0000000abg0000000083s2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:14 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	60514	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:14 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:14 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 1bf9778d-901e-007b-52d8-1eac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093314Z-r197bdfb6b4b582bwynewx7zgn00000001pg000000003wmt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:14 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	60517	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:14 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:14 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: afc125f3-101e-0034-63d8-1e96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093314Z-16b659b4499gfl4fdbx49yxptw0000000ba0000000009665 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:14 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	60518	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:15 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:15 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: caad5b66-c01e-0034-07d8-1e2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093315Z-15b8d89586fs9clcebkvq6f0sc00000003bg00000000281h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:15 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	60520	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:15 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:15 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:15 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 2bfc30ce-001e-00ad-2fd8-1e554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093315Z-16b659b44992vd4bkk50pmnxt00000000bc000000000bzfp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:15 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	60521	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:15 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:15 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: a7e9f920-901e-005b-7bd8-1e2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093315Z-16b659b4499pnh69zuen6a54mc000000090g0000000042gq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:15 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	60519	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:15 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:15 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 605c6e26-301e-003f-08d8-1e266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093315Z-r197bdfb6b42sc4ddemybqpm1400000009s0000000005a1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:15 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	60522	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:15 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 9afff02c-d01e-00ad-4ad9-1ee942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093315Z-15b8d89586fdmfsgn8gw8tkkbc000000034g00000000br95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	60527	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:16 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:16 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: a60dd697-201e-0000-33d8-1ea537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093316Z-16b659b4499rgn6gzhcff90q8g00000009m0000000004vrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:16 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	60523	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:16 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:16 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:16 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: a7e9faf1-901e-005b-2ed8-1e2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093316Z-16b659b44994sjcfes83c39y40000000076g00000000c5hr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:16 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	60525	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:16 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:16 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 1bf97a49-901e-007b-42d8-1eac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093316Z-r197bdfb6b488ks5g2m20m5xu400000009qg0000000020p2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:16 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	60526	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:16 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:16 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:16 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: afc1423d-101e-0034-03d8-1e96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093316Z-16b659b4499rzdzwehs0w9w5d800000008yg000000008u8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:33:16 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	60524	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:16 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:16 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 36b15b9b-c01e-0082-6ad8-1eaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093316Z-15b8d89586fsx9lfqmgrbzpgmg00000003b000000000ck9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:16 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	60531	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:17 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:17 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 9dceea2a-001e-002b-0dd8-1e99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093317Z-15b8d89586fx2hlt035xdehq5800000003a000000000e8fc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:17 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	60528	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:17 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: a02d454d-501e-00a0-57d8-1e9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093317Z-16b659b4499vb6rgub5604hgz000000008cg000000003kns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	60532	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:17 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:17 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 7ef23808-e01e-0051-72d8-1e84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093317Z-16b659b4499t9g2t855zkdgzd00000000a1g000000004b9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:17 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	60529	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:17 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: c52a0825-301e-001f-78d8-1eaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093317Z-16b659b4499f5gh931bbxe97rs00000008gg000000001dzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	60530	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:17 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:17 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 783e58c1-401e-00ac-30d8-1e0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093317Z-15b8d89586fzhrwg5nzgg1z60000000003a0000000009cuc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:17 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	60537	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:18 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:18 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 72513f84-001e-0046-3cd8-1eda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093318Z-16b659b4499gh2srh1fh903xkw00000009h0000000009qau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:18 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	60534	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:18 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:18 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: dab50239-001e-0066-6cd8-1e561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093318Z-15b8d89586frzkk2umu6w8qnt800000003b0000000002fdh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:18 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	60533	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:18 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:18 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:18 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: dd4886db-801e-0035-5ad8-1e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093318Z-16b659b4499mcktpfn1m4deuag00000007k000000000722r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:33:18 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	60536	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:18 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:18 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:18 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: 8414e67f-001e-0014-73d8-1e5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093318Z-15b8d89586fwzdd8ab09pbrekn0000000370000000005f61 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 09:33:18 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	60535	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 09:33:18 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 09:33:18 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 09:33:18 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 388316fc-801e-008c-1dd8-1e7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T093318Z-16b659b44999c8xwz4dbqvgykc0000000adg000000009u1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 09:33:18 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4624, Parent PID: 3400

General

Target ID:	0
Start time:	05:31:50
Start date:	17/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\DRL-272112.htm"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2060, Parent PID: 4624

General

Target ID:	2
Start time:	05:31:53
Start date:	17/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2208,i,4527277701206925154,16748076749947478816,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report DRL-272112.htm

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\Google.Widevine.CDM.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_114436946\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_249111334\optimization-hints.pb

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\Filtering Rules

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\LICENSE.txt

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_325785327\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_platform_specific\win_x64\widevinecdm.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\_platform_specific\win_x64\widevinecdm.dll.sig

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_646713435\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping4624_811647169\sets.json

Static File Info

General

Network Behavior

Suricata IDS Alerts

Windows Analysis Report
DRL-272112.htm