Edit tour

Windows Analysis Report
DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF

Overview

General Information

Sample name:	DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF
Analysis ID:	1538627
MD5:	2a1bc3ffc00a35f2868c56972e912414
SHA1:	5fe906cc5c0a468047ede83ef58239b4fb5dfd7b
SHA256:	875e8f5bdd7f2832da82c4e4a2cadd919b0be74f6731ad6daeafe89e4d2212b0
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

PDF has an OpenAction (likely to launch a dropper script)

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 5040 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 5224 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7236 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1740,i,17710573424274876289,11473630335914496264,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 8128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7828 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2056,i,14952913253673879385,12020884399626894508,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.com

SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Source: https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.com

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49765 version: TLS 1.2

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.171
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ypbtgUwEe4HlTtm&MD=fbEVfk9f HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.com HTTP/1.1Host: alanymm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: alanymm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ypbtgUwEe4HlTtm&MD=fbEVfk9f HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: alanymm.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF	String found in binary or memory: https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49765 version: TLS 1.2

Source: classification engine

Classification label: mal48.winPDF@38/51@5/5

Source: DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF	Initial sample: https://alanymm.com/m/?c3y9bzm2nv8xx3nwjnjhbmq9t1hoqlpyzz0mdwlkpvvtrviwmtewmjaynfuynzewmdeznq==n0123nacontreras@drummondltd.com
Source: DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF	Initial sample: https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.com

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.1216

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-21 09-51-45-799.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1740,i,17710573424274876289,11473630335914496264,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2056,i,14952913253673879385,12020884399626894508,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1740,i,17710573424274876289,11473630335914496264,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2056,i,14952913253673879385,12020884399626894508,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF	Initial sample: PDF keyword /JS count = 0
Source: DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF	Initial sample: PDF keyword /JavaScript count = 0

Source: DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF

Initial sample: PDF keyword /OpenAction

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.com	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
http://x1.i.lencr.org/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
alanymm.com	78.135.79.21	true	false	unknown
x1.i.lencr.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://alanymm.com/favicon.ico	false		unknown
https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.com	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123	DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF	false		unknown
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
78.135.79.21	alanymm.com	Turkey	42910	PREMIERDC-VERI-MERKEZI-ANONIM-SIRKETIPREMIERDC-SHTR	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
96.17.64.171	unknown	United States	16625	AKAMAI-ASUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1538627
Start date and time:	2024-10-21 15:50:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF
Detection:	MAL
Classification:	mal48.winPDF@38/51@5/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .PDF Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.88.176, 107.22.247.231, 54.144.73.197, 34.193.227.236, 18.207.85.246, 2.19.126.143, 2.19.126.149, 162.159.61.3, 172.64.41.3, 2.23.197.184, 199.232.210.172, 192.229.221.95, 142.250.185.163, 216.58.206.78, 66.102.1.84, 34.104.35.123, 142.250.186.170, 216.58.212.170, 142.250.185.138, 142.250.185.234, 142.250.184.202, 172.217.23.106, 142.250.185.170, 142.250.186.74, 142.250.185.202, 142.250.184.234, 216.58.206.42, 142.250.185.106, 216.58.206.74, 216.58.212.138, 142.250.181.234, 142.250.185.74, 142.250.186.67, 142.250.184.206
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF

Simulations

Behavior and APIs

Time	Type	Description
09:51:56	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
78.135.79.21	https://t.ly/k1aDE	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
239.255.255.250	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse
	http://images.google.ru/url?q=%68t%74%70s%3A%2F%2F%64%6Fcs%2Eg%6F%6Fg%6Ce%2Ec%6F%6D%2Fd%72a%77i%6E%67%73%2Fd%2F%31%72bd%37%55%43%35%47%72%6B%71ai%54%45u%2D%5F%51%6D%4D%49%79%49%36%45%4B%36%4E%78%67%6F%57%52%39%4E%57%6A%4A%50%6Be%6B%2Fpre%76iew%23%4F%4C%68%49%2D%54%37%65&sa=D&sntz=1&usg=6_WlxHZ	Get hash	malicious	HTMLPhisher	Browse
	https://docs.google.com/drawings/d/1rNIRSAgTQ9BvkQDgt6I1-bvyHw8Lwl60PfNx3hGnniY/preview?pli=128762876287628762876287628762876	Get hash	malicious	Unknown	Browse
	[EXTERN]-Money-On-The-Way!!.msg.eml	Get hash	malicious	Unknown	Browse
	https://tcmedcenter-my.sharepoint.com/:f:/g/personal/jessica_larson_tcmedcenter_org/Ek1X93Tsfp5KoiWqKbJ_ocQBqlE2wGVJqWkJh4H7mn0vuw?e=Yni2o7	Get hash	malicious	Unknown	Browse
	https://www.google.hn/url?q=//www.google.ee/amp/s/h2f35e7.ubpages.com/bdeda8-f4eb-4ed8-b	Get hash	malicious	HTMLPhisher	Browse
	Carboline Quote Request.eml	Get hash	malicious	HTMLPhisher	Browse
	Re_ Matthew Magro shared _Bonitz .pdf_ with you.eml	Get hash	malicious	HTMLPhisher	Browse
	http://winmtr.net/WinMTR-v092.zip	Get hash	malicious	Unknown	Browse
	https://t.ly/N1B0D	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
alanymm.com	https://t.ly/k1aDE	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	78.135.79.21
bg.microsoft.map.fastly.net	https://docs.google.com/drawings/d/1rNIRSAgTQ9BvkQDgt6I1-bvyHw8Lwl60PfNx3hGnniY/preview?pli=128762876287628762876287628762876	Get hash	malicious	Unknown	Browse	199.232.210.172
	Carboline Quote Request.eml	Get hash	malicious	HTMLPhisher	Browse	199.232.214.172
	TENDER ADDENDUM NO. 01.vbs	Get hash	malicious	GuLoader	Browse	199.232.214.172
	272766612509812656.js	Get hash	malicious	Unknown	Browse	199.232.210.172
	Aviso de transferencia.exe	Get hash	malicious	AsyncRAT, PureLog Stealer	Browse	199.232.210.172
	258491645830653677.js	Get hash	malicious	Unknown	Browse	199.232.214.172
	ekte.exe	Get hash	malicious	FormBook	Browse	199.232.210.172
	https://library.wic.ac.uk/upload/~/app/step2.php?id=37602430	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://library.wic.ac.uk/upload/~/app/step3.php?id=5384235	Get hash	malicious	Unknown	Browse	199.232.214.172
	Anfrage fur Proforma-Lieferrechnung und Zahlungsbedingungen.vbs	Get hash	malicious	GuLoader	Browse	199.232.214.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
PREMIERDC-VERI-MERKEZI-ANONIM-SIRKETIPREMIERDC-SHTR	https://t.ly/k1aDE	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	78.135.79.21
	voicemai____Now_AUD__autoresponse(9.htm	Get hash	malicious	Phisher	Browse	188.132.193.30
	Swift E-Posta Bildirimi_2024-09-23_T11511900.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.132.158.64
	Contact Form and Delivery Details.png.lnk	Get hash	malicious	Unknown	Browse	188.132.193.46
	e-dekont.html.exe	Get hash	malicious	AgentTesla	Browse	188.132.200.16
	ZgBCG135hk.elf	Get hash	malicious	Mirai, Moobot	Browse	77.92.131.244
	Dekont_20240917_38847738373.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	78.135.65.5
	jMMTZcFBa8.elf	Get hash	malicious	Mirai, Okiru	Browse	188.132.182.118
	https://go.skimresources.com/?id=129857X1500501&url=https://www.freelansssssssssssssssscer.com/users/login-quick.php?token=30b3628412ea618dcc3f414b266ae263302b3e1b43e6d2d885225319dabe8e68&url=https://secure.adnxs.com/seg?redir=https://link.sbstck.com/redirect/298cfa06-ad24-42db-8a85-7a3ca069b2cf?j=eyJ1IjoiNGRnZ2x2In0.IkG1h6SLHR3lrFyuSAoQTcZBzKZHtH4uVLaC9IQ4Uu8	Get hash	malicious	HTMLPhisher	Browse	188.132.193.40
	https://go.skimresources.com/?id=129857X1600501&url=https://www.freelancer.com/users/login-quick.php?token=30b3628412ea618dcc3f414b266ae263302b3e1b43e6d2d885225319dabe8e68&url=https://secure.adnxs.com/seg?redir=https://link.sbstck.com/redirect/c16392c5-3f33-44df-b0b3-21de244d07c1?j=eyJ1IjoiNGRnZ2x2In0.IkG1h6SLHR3lrFyuSAoQTcZBzKZHtH4uVLaC9IQ4Uu8	Get hash	malicious	HTMLPhisher	Browse	188.132.193.40
AKAMAI-ASUS	file.exe	Get hash	malicious	LummaC, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	https://tcmedcenter-my.sharepoint.com/:f:/g/personal/jessica_larson_tcmedcenter_org/Ek1X93Tsfp5KoiWqKbJ_ocQBqlE2wGVJqWkJh4H7mn0vuw?e=Yni2o7	Get hash	malicious	Unknown	Browse	23.38.98.68
	Carboline Quote Request.eml	Get hash	malicious	HTMLPhisher	Browse	23.203.104.175
	file.exe	Get hash	malicious	LummaC	Browse	23.50.98.133
	Constate	Get hash	malicious	Unknown	Browse	96.17.64.247
	file.exe	Get hash	malicious	LummaC	Browse	23.50.98.133
	file.exe	Get hash	malicious	LummaC	Browse	95.100.48.249
	Message_2530136.eml	Get hash	malicious	Unknown	Browse	2.19.126.160
	https://www.childkorea.or.kr/bbs/link.html?code=alarm&number=3064&url=https://form.jotform.com/242923371946059	Get hash	malicious	HTMLPhisher	Browse	184.50.112.129
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://docs.google.com/drawings/d/1rNIRSAgTQ9BvkQDgt6I1-bvyHw8Lwl60PfNx3hGnniY/preview?pli=128762876287628762876287628762876	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	[EXTERN]-Money-On-The-Way!!.msg.eml	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://www.google.hn/url?q=//www.google.ee/amp/s/h2f35e7.ubpages.com/bdeda8-f4eb-4ed8-b	Get hash	malicious	HTMLPhisher	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	Carboline Quote Request.eml	Get hash	malicious	HTMLPhisher	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	Re_ Matthew Magro shared _Bonitz .pdf_ with you.eml	Get hash	malicious	HTMLPhisher	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	http://winmtr.net/WinMTR-v092.zip	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	RFQ 1307.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://library.wic.ac.uk/upload/~/app/step2.php?id=37602430	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://library.wic.ac.uk/upload/~/app/step3.php?id=5384235	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	SUNLIGHT ORDER.xls	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.229525146215202
Encrypted:	false
SSDEEP:	6:F9Hyq2Pwkn2nKuAl9OmbnIFUt8U0r1Zmw+U09RkwOwkn2nKuAl9OmbjLJ:CvYfHAahFUt851/+p5JfHAaSJ
MD5:	E53B7047107B5837C4980BADB51179B4
SHA1:	094CBED60E19B885F09C5FF947A18CE6C26ABC0E
SHA-256:	9BC793063427796A1ABE47E3661342926A09E445873A4A0156BAECE144EF85C5
SHA-512:	CD72F0628ACEE6A79EA9F495A38E66E37760EBC9D6955B1FC63EEDE69D3C9BF58AA3B71928A7BC3964DB5A71B551E13639D42850E7092FEDFEC4B041D16A9126
Malicious:	false
Reputation:	low
Preview:	2024/10/21-09:51:43.573 a50 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/21-09:51:43.576 a50 Recovering log #3.2024/10/21-09:51:43.576 a50 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.229525146215202
Encrypted:	false
SSDEEP:	6:F9Hyq2Pwkn2nKuAl9OmbnIFUt8U0r1Zmw+U09RkwOwkn2nKuAl9OmbjLJ:CvYfHAahFUt851/+p5JfHAaSJ
MD5:	E53B7047107B5837C4980BADB51179B4
SHA1:	094CBED60E19B885F09C5FF947A18CE6C26ABC0E
SHA-256:	9BC793063427796A1ABE47E3661342926A09E445873A4A0156BAECE144EF85C5
SHA-512:	CD72F0628ACEE6A79EA9F495A38E66E37760EBC9D6955B1FC63EEDE69D3C9BF58AA3B71928A7BC3964DB5A71B551E13639D42850E7092FEDFEC4B041D16A9126
Malicious:	false
Reputation:	low
Preview:	2024/10/21-09:51:43.573 a50 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/21-09:51:43.576 a50 Recovering log #3.2024/10/21-09:51:43.576 a50 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.194749760549545
Encrypted:	false
SSDEEP:	6:F483+q2Pwkn2nKuAl9Ombzo2jMGIFUt8UKZZmw+UKNVkwOwkn2nKuAl9Ombzo2jz:BOvYfHAa8uFUt8H/+V5JfHAa8RJ
MD5:	FD8B99B1A8D1A630312623D30D971B4B
SHA1:	1B34875A24C5A1B473977572105038D90AE804DC
SHA-256:	623A495A177BEC47BB2344AB797A0094A17DC0CCAB04F68364105F870C0B6B6C
SHA-512:	5A4C79BFE656E84E34209B47D3418DB1D3C1F08C091D2BE273D0D2730473A835650499A4AD3E32053C3E52663247667876BE8EE85CA328637673363C6A809E28
Malicious:	false
Reputation:	low
Preview:	2024/10/21-09:51:43.703 1ca8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/21-09:51:43.704 1ca8 Recovering log #3.2024/10/21-09:51:43.704 1ca8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.194749760549545
Encrypted:	false
SSDEEP:	6:F483+q2Pwkn2nKuAl9Ombzo2jMGIFUt8UKZZmw+UKNVkwOwkn2nKuAl9Ombzo2jz:BOvYfHAa8uFUt8H/+V5JfHAa8RJ
MD5:	FD8B99B1A8D1A630312623D30D971B4B
SHA1:	1B34875A24C5A1B473977572105038D90AE804DC
SHA-256:	623A495A177BEC47BB2344AB797A0094A17DC0CCAB04F68364105F870C0B6B6C
SHA-512:	5A4C79BFE656E84E34209B47D3418DB1D3C1F08C091D2BE273D0D2730473A835650499A4AD3E32053C3E52663247667876BE8EE85CA328637673363C6A809E28
Malicious:	false
Reputation:	low
Preview:	2024/10/21-09:51:43.703 1ca8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/21-09:51:43.704 1ca8 Recovering log #3.2024/10/21-09:51:43.704 1ca8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967662706425927
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqMCSsBdOg2Hecaq3QYiubInP7E4T3y:Y2sRdsodMHh3QYhbG7nby
MD5:	06D9E615937DC0A0557E599789B4E74F
SHA1:	9CBA3668D92F3198DA2F96FD17722F0682FBE963
SHA-256:	0BDE7A23B80B3C2395C2E6CD5623717F3B25373E0E1F7661BE98106A5B4C5E0D
SHA-512:	3670DA697B2C5FF4DD4309F8F0A40EB2DC02690EEBA9A22E5004600A59924BFFDD10FC9D98631D53490F47D6AC2260EF12B9FB56A3B387971AB67B77588DB889
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13374078716204339","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":145833},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\bd26cee1-259d-4b72-b280-1f878a0e4c8f.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.967662706425927
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqMCSsBdOg2Hecaq3QYiubInP7E4T3y:Y2sRdsodMHh3QYhbG7nby
MD5:	06D9E615937DC0A0557E599789B4E74F
SHA1:	9CBA3668D92F3198DA2F96FD17722F0682FBE963
SHA-256:	0BDE7A23B80B3C2395C2E6CD5623717F3B25373E0E1F7661BE98106A5B4C5E0D
SHA-512:	3670DA697B2C5FF4DD4309F8F0A40EB2DC02690EEBA9A22E5004600A59924BFFDD10FC9D98631D53490F47D6AC2260EF12B9FB56A3B387971AB67B77588DB889
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13374078716204339","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":145833},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.252099748054403
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo7dtbP66tGZ:etJCV4FiN/jTN/2r8Mta02fEhgO73goq
MD5:	D77581EED535FBC3B201354A08519866
SHA1:	F91B073A8F28C1F13F77A701A13EA48EF83D2B43
SHA-256:	11B2528F77691FD312F3A8EBBDAE35436EFB3A63F41B5604D4DA06A506A71599
SHA-512:	80AE327F2718A0F2BBA366320AA3F2E7AFB3E2755F13FAC39B55E1D90D68F4047C1735E3A5F48E404FAF5CC43821A45F83C486DA7EDB7BB6F53C75C503FBFB8A
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.204745682940342
Encrypted:	false
SSDEEP:	6:F8dON+q2Pwkn2nKuAl9OmbzNMxIFUt8UxQZmw+U+BVkwOwkn2nKuAl9OmbzNMFLJ:+HvYfHAa8jFUt8z/+xP5JfHAa84J
MD5:	9A3828DB4CC4BD438492FACEF6AE2B11
SHA1:	787627065FCE865B212F760C0744A699C2437073
SHA-256:	3364091559E293B430B26753C5A1C6CB5F795407D7DF21B6BA98A80D5905CAC4
SHA-512:	26B1D21399A85703A4A95E98DE4D4BBCB3ED124B4A5DF33140DB0609CEEAADC94495ECE3B89DECB01A951F41C12DAFF67679A013E438F5D51845E790A08D2C73
Malicious:	false
Preview:	2024/10/21-09:51:43.886 1ca8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/21-09:51:43.920 1ca8 Recovering log #3.2024/10/21-09:51:43.928 1ca8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.204745682940342
Encrypted:	false
SSDEEP:	6:F8dON+q2Pwkn2nKuAl9OmbzNMxIFUt8UxQZmw+U+BVkwOwkn2nKuAl9OmbzNMFLJ:+HvYfHAa8jFUt8z/+xP5JfHAa84J
MD5:	9A3828DB4CC4BD438492FACEF6AE2B11
SHA1:	787627065FCE865B212F760C0744A699C2437073
SHA-256:	3364091559E293B430B26753C5A1C6CB5F795407D7DF21B6BA98A80D5905CAC4
SHA-512:	26B1D21399A85703A4A95E98DE4D4BBCB3ED124B4A5DF33140DB0609CEEAADC94495ECE3B89DECB01A951F41C12DAFF67679A013E438F5D51845E790A08D2C73
Malicious:	false
Preview:	2024/10/21-09:51:43.886 1ca8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/21-09:51:43.920 1ca8 Recovering log #3.2024/10/21-09:51:43.928 1ca8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241021135147Z-149.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
Category:	dropped
Size (bytes):	65110
Entropy (8bit):	0.13640981862630389
Encrypted:	false
SSDEEP:	12:ptscY4skwPbxRX1LmDeLM0hAhtBo9lY2svPorZWzy7uVH/mM5MzJ97yxl5yiTgWd:DTY48D/FLmWTSQvicZWOW/moM4HFwNs
MD5:	55E9850D301B6D9E1E425F5848FA18A0
SHA1:	9A3A6F2158469FC7EEC7D2E0EB88E651EB3608C7
SHA-256:	52E4DE5850A23E27662B721E36BB76A506FDD96AFA572F5F2DC743603290F2F4
SHA-512:	BEED2D08240461099924A812411B0B47414B42EED42BD1CD91B62B583C5EAA89ECCFB8059F30B048294F5B8386410E019512E5921B0CE0F7C0EA4E6B55606AF5
Malicious:	false
Preview:	BMV.......6...(...k...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.445024664567603
Encrypted:	false
SSDEEP:	384:yezci5tGiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:rJs3OazzU89UTTgUL
MD5:	46F143E472B45076F395D0CF3ABA690E
SHA1:	BC2F28078C5F426E9A8D6317385A3D1E278C1F49
SHA-256:	49BC6917E7F709761EE6B47814920CA37F23B89E4397853CE1F7CAAF1F60F296
SHA-512:	10BEA47CCD1251C1B63A9324592A62184A6DB60BC4844CFEF305F4AEDC86F88539BCE2ED4BC2E13CD8F857739FD9DC83B68E7D7FA9CF9C8E8136F2FEE9624C62
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7761248664690057
Encrypted:	false
SSDEEP:	48:7Myp/E2ioyVfioy9oWoy1Cwoy1rKOioy1noy1AYoy1Wioy1hioybioy7oy1noy1v:7hpjufFCXKQe6b9IVXEBodRBko
MD5:	8F45075D105052CB3C5E98253EF05B02
SHA1:	6F42B5D5885D5E8BC205572B520DDCC20B27AD03
SHA-256:	2B49DD257CF7E6A8FBC241C851EE38C2BE09DB1CE764E5DE918AE7C8735658B8
SHA-512:	6B1AF657D09A6AAF094306A8101746A0F90499E6A171EFBD91C2DD3D7D19682541A452FFA7C2AD747AED40953E475F430241D9B555A29DF1D1F3F1D3DE204C19
Malicious:	false
Preview:	.... .c.....W..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7686775296558497
Encrypted:	false
SSDEEP:	3:kkFklNg2pklfllXlE/HT8kVllltNNX8RolJuRdxLlGB9lQRYwpDdt:kK52pkmT8YtTNMa8RdWBwRd
MD5:	ED8F8F58D97BCFD04131EF40D94E711A
SHA1:	71884ECA1F190ADADF306F387334D9E714D6638B
SHA-256:	45FCED476631BBF554E646A83EB1D77487204626E4EA873E96A4D18B044B5EA0
SHA-512:	02FB37806CE747B20FDD46B3F3EFF0EEC2C1EAB11C64EB5F3A32AE3AE1DCB5D41A71D970B0421524DFD2114E44D079848562E69BF324C9A86796B0610FA1B6D1
Malicious:	false
Preview:	p...... ........~.wd.#..(....................................................... ..........W....->..............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.2418003062782916
Encrypted:	false
SSDEEP:	6:kK1bT9UswD8HGsL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:N2DImsLNkPlE99SNxAhUe/3
MD5:	58E7D0E8A306159D72AC79A2897E598C
SHA1:	475A71CEB37C10810AB6ED051D6071068DE3ACD4
SHA-256:	59A4A884FE1046A64B9D3265785384FECBE8EE9F38A583FA1034985A95510FD0
SHA-512:	2905420BFF2B5E147E44630341AE07A37DDF8C9EF738958C403A00BF3D343823354BF958677EFA607DE5EFBA9252F097B7A1C6D4B646C978416A0CD06E56338A
Malicious:	false
Preview:	p...... ..........v.#..(....................................................... ........G..@.......&......X........h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.1216

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	243196
Entropy (8bit):	3.3450692389394283
Encrypted:	false
SSDEEP:	1536:vKPCPiyzDtrh1cK3XEivK7VK/3AYvYwgqErRo+RQn:yPClJ/3AYvYwghFo+RQn
MD5:	F5567C4FF4AB049B696D3BE0DD72A793
SHA1:	EBEADDE9FF0AF2C201A5F7CC747C9EA61CFA6916
SHA-256:	D8DBFE71873929825A420F73821F3FF0254D51984FAAA82E1B89D31188F77C04
SHA-512:	E769735991E5B1331E259608854D00CDA4F3E92285FDC500158CBD09CBCCEAD8A387F78256A43919B13EBE70C995D19242377C315B0CCBBD4F813251608C1D56
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.368317690018971
Encrypted:	false
SSDEEP:	6:YEQXJ2HXi6SRjJEVoZcg1vRcR0Y2FoAvJM3g98kUwPeUkwRe9:YvXKXi6SLFZc0vBaGMbLUkee9
MD5:	BB65F9B00C5ACAB3DDF41A77C1D40F57
SHA1:	50589B49E1FFAE61BEB2FAEA7C241FF0388B7355
SHA-256:	B4BCD477E6422E4544736D37D6FB7C63340B388AFE2F139D74CE7C10F8D077B0
SHA-512:	38B2D914621717ABAC8BD4E0D6C9D74223F42ABE3BD4E739DB5BE6D0AED9E0D0BB3800E9BF1B54F81FA8BCEA7402572CF3A810A1F397845058AEAA263C5E8E5E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.3194612216613
Encrypted:	false
SSDEEP:	6:YEQXJ2HXi6SRjJEVoZcg1vRcR0Y2FoAvJfBoTfXpnrPeUkwRe9:YvXKXi6SLFZc0vBaGWTfXcUkee9
MD5:	575BEC9B7CE3D2006BDA53ABC0C2F9FE
SHA1:	5F4E8B325A17B11DBCCBE5DB5F94A94C2D7C2966
SHA-256:	E57636E6E4803592A2CCF1044D7E1C2602B015759344918F1B2C7982261304E6
SHA-512:	B20D0F20B7B26FB8AA10ACDD0AA6272ACAC93046C3107EC104E3EEE016F1C21D02F5A34456EC033235401EEC124A131331C59844EA1EA7033291E3E617802364
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.298167435888179
Encrypted:	false
SSDEEP:	6:YEQXJ2HXi6SRjJEVoZcg1vRcR0Y2FoAvJfBD2G6UpnrPeUkwRe9:YvXKXi6SLFZc0vBaGR22cUkee9
MD5:	A043073FD343160DA6BAD862F0824A03
SHA1:	8D6C217149895D5EC48C874453A685663CB80C40
SHA-256:	75A5AA0FDD5E6594F9559E4096F6C8861AB500118596DAF55810F7FEAB500561
SHA-512:	0E38103950C6FCD5BCBB5F08950C4F76E6E6F1266134CE5ED3275AB893BD290D1523ED8115321EAD02EF64299B35AD84CE43BBAF73A734684DDD59FD70C9D4ED
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.355502031431736
Encrypted:	false
SSDEEP:	6:YEQXJ2HXi6SRjJEVoZcg1vRcR0Y2FoAvJfPmwrPeUkwRe9:YvXKXi6SLFZc0vBaGH56Ukee9
MD5:	621A8BA58178FA6EEA24610FE2BF1FD7
SHA1:	FF3ECEC609DD6EC66CB1ACABF9AAF0DF959A2D22
SHA-256:	431F9B52C4273BDFD17A38C860B8D47C0BAC6C49B0156C66D1023BBF864E1170
SHA-512:	387E3AF112526543977B381A341558C791255D28D22FF10FF3E8512CA262A1633F0EE7C1D35B2C4D3A078E667F897A6DC9FDC1459EDEA9CC3485B71EA6B083CC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1055
Entropy (8bit):	5.659048994906026
Encrypted:	false
SSDEEP:	24:Yv6XsLFzvNpLgEscLf7nnl0RCmK8czOCCSz:Yv9lhgGzaAh8cv/z
MD5:	A8A29632AE6C31A533043169798D052D
SHA1:	925DA0845E8EE8E4DB2FDF3CD7C2114D122029E3
SHA-256:	AD95E7230F0F5A2AFAB060D3CA3E2B7363DB71F317F6FF30589CA4350C912120
SHA-512:	A483E3CF97E1C0C362CE490FE5E559055D458D3F6B8A12CA209ADC0729F2D55AD058DFBA5307D891B2F5A05A834000C7A5C18A7676AD5BF927BD8523FD293AF6
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"92038_285529ActionBlock_1","campaignId":92038,"containerId":"1","controlGroupId":"","treatmentId":"eb1a4bce-8215-46f1-b44c-154b21a85d60","variationId":"285529"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNhdElkIjpudWxsfQ==","dataType":"application\/json","encodingScheme":tr

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1050
Entropy (8bit):	5.65245929661179
Encrypted:	false
SSDEEP:	24:Yv6XsLFzvRVLgEF0c7sbnl0RCmK8czOCYHflEpwiVC:Yv9pFg6sGAh8cvYHWpwz
MD5:	3372EEDDA0BF7D3BF1953EE26C431886
SHA1:	359068D5CECB1BF6F439AAD2874FBA86FF22FA6E
SHA-256:	D8F8802BC5549391FFA328BBC2A2EAC5A766F9EFB79633DE959B9D8CA225E82C
SHA-512:	6DFBB1036BE94DA00721EECB6E369AB32F4FDE9D47952980AB3961E3A2B549CC55FAF28C5A0774195E94BD76B8CF367FBA384E28AA579DFE3304CD33D7B0279D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_0","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"0924134e-3c59-4f53-b731-add558c56fec","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuZm9ybXMgJiBhZ3JlZW1lbnRzLiJ9LCJ0Y2F0SWQiOm51bGx9","dataType":"application\/json","encodingScheme":true},"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.305540650590558
Encrypted:	false
SSDEEP:	6:YEQXJ2HXi6SRjJEVoZcg1vRcR0Y2FoAvJfQ1rPeUkwRe9:YvXKXi6SLFZc0vBaGY16Ukee9
MD5:	67B2C1F31FFD4FBCE3D905FE2EB4C0BE
SHA1:	784DB40EB8BC077E64DB53E0E4B475A8DF076E04
SHA-256:	7A02A3CCC7C039AB7A9CBC35DAF046209369BD2196FB120A575B84A122A198D8
SHA-512:	CA624C9AE804997EAF4D22FB0F9AEC641B713F160A6C3F5D72F39850AB83CFC222C3FD305B21834C2737867E380AE2EEDCEB666C6E32C66BD174C5D4BE23571F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	5.644499224536173
Encrypted:	false
SSDEEP:	24:Yv6XsLFzvA2LgEF7cciAXs0nl0RCmK8czOCAPtciBC:Yv9Yogc8hAh8cvA0
MD5:	F9F8AEE0E9ED7FC61A446543FAAB8F8A
SHA1:	F09E81FF1B795480435555B68C0D1E148D338977
SHA-256:	AB62BE9733C7898C851552CEAE9A06B5F320AE7C9026AB3CEFEBC2ED391BE41F
SHA-512:	928C9385868EF1F547EEB4E8804408AE8EFB889AE5D1378A392F838DB0E6E43CD93BA029040E08E985F105D739F4136B455804B4D707FC68B327D03D4FDDBA1A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_1","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"49d2f713-7aa9-44db-aa50-0a7a22add459","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVkaXQgdGV4dCwgaW1hZ2VzLCBwYWdlcywgYW5kIG1vcmUuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1744

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.6984916914829755
Encrypted:	false
SSDEEP:	24:Yv6XsLFzvIKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK5C:Yv9QEgqprtrS5OZjSlwTmAfSK4
MD5:	A15CFF54A00204CAF4253D7C4FECBAF4
SHA1:	9602279278DF4667A1AC1CAE8AD93E2EA88075C8
SHA-256:	5B7237E913ACF249B30F371BC81AD43BD96AABC0808E6A58E2EF97CDAADBE411
SHA-512:	575D5EE344C89DC5814E35818BFA73C45476E030E7590327057FB748FEB4B55AC9678A797CC2A2AA76F2F532F64C613DD128AA2BD69952A07D71CFF288838EAE
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.307153864356373
Encrypted:	false
SSDEEP:	6:YEQXJ2HXi6SRjJEVoZcg1vRcR0Y2FoAvJfYdPeUkwRe9:YvXKXi6SLFZc0vBaGg8Ukee9
MD5:	3CF8ECA73B99AF97ECEBB2EFD52373CD
SHA1:	F8843CA057A4913E5AD2069A93A50A625C95C790
SHA-256:	0EB23F6EDBB018710556AA591EB141A7B6CD8E28549B9E19C304EE88FCBB2D7F
SHA-512:	48C743AE877ABD9A54C75288437D245DAE786DC21D1DF561537CC8A7028D0276B0A059DE3459495922CB313B906BE75225C5FA2B16BCCA9CF95BB19A94459936
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.775707475315007
Encrypted:	false
SSDEEP:	24:Yv6XsLFzvnrLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJNa:Yv9fHgDv3W2aYQfgB5OUupHrQ9FJ4
MD5:	0BE65348681B139B03D945A18EE32EF8
SHA1:	E61040643B4DBB5B69314EDE465CE0EAF205D9D4
SHA-256:	D084606248C8F292F510DE35327003AF81633D5DBBD073C0B142423F0F045FC9
SHA-512:	3BB2578090EAE4BE3D1A69AA3523BC43934C331FB64F538DEB82A83BBB8CEF3869A8D7F2317A8FB5E404A50005B3227D1EF67330E817953DB49FF2AC0D2A3FAB
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.290651794577615
Encrypted:	false
SSDEEP:	6:YEQXJ2HXi6SRjJEVoZcg1vRcR0Y2FoAvJfbPtdPeUkwRe9:YvXKXi6SLFZc0vBaGDV8Ukee9
MD5:	C5D864D30D31B204BF76959AE1ACC378
SHA1:	D01B527C9D478EC1EF3F9A87A80B721321D07453
SHA-256:	5A81C7BF3C7516A6FBBE9E1473B18EA9227DD01ECCDC608C0A8FB6526E905F8B
SHA-512:	3B75395AE90C1F2DFF54C37CD79F7E628848C7E01EF94E1C228B9C1A785FE7D63F8E568AC0DD4ECF6043BFDEDE8982E828B5D3D84BEB9D5DF739EA540C73A5AA
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.29569813296668
Encrypted:	false
SSDEEP:	6:YEQXJ2HXi6SRjJEVoZcg1vRcR0Y2FoAvJf21rPeUkwRe9:YvXKXi6SLFZc0vBaG+16Ukee9
MD5:	26FF7E3EC7B220825EDF22687A529358
SHA1:	CF10E93E24716283474043BCF88FD1E199AAEF78
SHA-256:	568C78432C4837CA989EAAB5ACB563E229D0E37EB40E45751CCAAF0106D2B144
SHA-512:	E69773F085DC0661A596823BF3AE155EC6B5173B18CAD50ED8E35655B314A543C79F0E44C661023ABE6EDC1058D10900C3316526239958C76D90A402EF5E5B18
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	5.630705779862189
Encrypted:	false
SSDEEP:	24:Yv6XsLFzv1amXayLgE7cMCBNaqnl0RCmK8czOC/BSz:Yv9RBgACBOAh8cvMz
MD5:	ED2C0B1297ACAEC33C024E36D3DC82B0
SHA1:	ED0B71B302163FD65A6DE7F25C5C17918E6BDB4E
SHA-256:	4DE520CC31B62B8DBF03A782FF96ED0BAC7663B48EE88EAFF381B2DBC0BD33CD
SHA-512:	4C36605090A0EDE5EBB0365EFBCEF6DB0C1A7118710154020B0572142A584CFBB4156AAF85FD47ECE180D70E24FA805FEEB04FD34D20D6B622FB5F3CD5E0923C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"92038_285529ActionBlock_0","campaignId":92038,"containerId":"1","controlGroupId":"","treatmentId":"6291f52b-6cb0-4d31-bc46-37ce85e9eb25","variationId":"285529"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1751323379000,"s

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.269927233547101
Encrypted:	false
SSDEEP:	6:YEQXJ2HXi6SRjJEVoZcg1vRcR0Y2FoAvJfshHHrPeUkwRe9:YvXKXi6SLFZc0vBaGUUUkee9
MD5:	A7E7746BBF89B679BA2E385959BC6D44
SHA1:	4F50A8A4E74B1C9305494D7D38CE0B65846C79CC
SHA-256:	E66B03F937BF542F94BE2DC37F97593706F9A7046C0C3C09EA8FE08F1A51AE75
SHA-512:	EC317D0E4081CD2D1C5F3DC21ADB2014F55E724F1F322337C21AFEFA21165FD8A440419DE1EA7A7794A09DA0DD3941A4682B99630F4E9B4B89DECA638AC70734
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.369639432855383
Encrypted:	false
SSDEEP:	12:YvXKXi6SLFZc0vBaGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWW:Yv6XsLFzvG168CgEXX5kcIfANhz
MD5:	B7645D1BB04CAD40CB5B52D1B29BFF31
SHA1:	721EF895D96D5AEEDA278F142E103A26A08057F5
SHA-256:	C9FEBB039D56621E47754CD258D4C697822D4F054A9E626140FB734F5D3920AC
SHA-512:	A40BD08AE4A0F6329AE82C94082BEDA3ED02902557AA045CC4D02AED697209B146A577A8900229AEF01A9A36EE725777F951BF73C9E70351FE5F0A8A21738526
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"98c6b0d0-ba1f-4db5-9421-b89934ad1a0e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729698664612,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1729518709644}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2818
Entropy (8bit):	5.142322916712551
Encrypted:	false
SSDEEP:	24:YO5K4KsMaaMFayo6BmhU1CeTs2MnNu4B7xjtRTj0S7BWkr2U2LSFUQ539rQiuAOG:YOfKcf4ejYTu4ntRfB/1vUQ1980
MD5:	0B47C8180F10E9207984F0A2BB6C0B90
SHA1:	071D4E66A0D52DBDF9314E2D657F118CBEC3F242
SHA-256:	2C78EF312958883C5C85A15FAAFEA2266A3301D7B06230C67399460805E18DAC
SHA-512:	054470D5DED773B3A539B4C869F0310CF0182E58D45DD9E2876DBEAA761955243F42D419E843D6343E981FB217CE5D7CD1A167C5310BE74F329569CA35063975
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"4f5cb20d1320e3b852905f32828b7e1b","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1050,"ts":1729518708000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"e16e0ea7553959cc4eb70e79eb361f10","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1729518708000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"44f11382bcef4c551a863a25b2edc982","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1026,"ts":1729518708000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"10b11a0db19f3753d56da695eaa2db73","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1055,"ts":1729518708000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"69020c5e7bbff2fd2855fb5a4fa9e6b9","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1038,"ts":1729518708000},{"id":"Edit_InApp_Aug2020","info":{"dg":"b774b0c15362fecce12c1faa93a8f8bb","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":17

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.188422410134815
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUUSSvR9H9vxFGiDIAEkGVvpQ:lNVmswUUUUUUUUS+FGSItU
MD5:	C66BB756824B6B42963F5A1042F8AA6B
SHA1:	3014978A2CB6A4992302F2E4AB13F1BF625DF1FA
SHA-256:	54D0B24DE7983AC7DE334B8A1D94C02B602B9C7181670F89B3B0251AF5B35888
SHA-512:	E5187FC24C773F6AE328B78000097D81743D02484E4A5FCC6AEDEE1ECECDD46A94FAC2CB08A071DDAE0E137832B977579805F94A7E4C923B61E1972665923E8F
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.6087671853797847
Encrypted:	false
SSDEEP:	48:7MHmtKUUUUUUUUUUAvR9H9vxFGiDIAEkGVvOqFl2GL7msl:72mQUUUUUUUUUU4FGSIt0KVmsl
MD5:	8AF01E163A432583DAA09676822F64EC
SHA1:	25E1AD48672AC6DCBA4E27EA90F9E6E982CB55C9
SHA-256:	570254299C4204754C14CA64AFF446A7CBE76D1CE68B4E20898383A841446D77
SHA-512:	BE24E5C71FF6F79A3A1600D3698DF8F071931263CE5BC769F9B4081219BA46DE029F2C2075852BD9D48FA7691270AA2FDB9D862ECB4AE6F9FD0E4887820BEC0A
Malicious:	false
Preview:	.... .c.......\|.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIc5ff0.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5085442896850614
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8PaJ4WH:Qw946cPbiOxDlbYnuRKys
MD5:	8C239C887EB987ABDEE0D4081C7B781A
SHA1:	71BAE4EE572FBBA2D7F55CA76202F57CDA4CDF6D
SHA-256:	73F24775C46C5550F520D9A7EC1B11D9F003F34BA20FFCD6E236331E4D1E0F0C
SHA-512:	6B6B2AFBC9E1FF47FF62F81728BEEAD040A12DAF7ED755B4BEE4B7E64C556E9C2507AE2CD0C8EE98ED7B6A96A404803AB7F89528F30D0E643A56301F3233DF8C
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .2.1./.1.0./.2.0.2.4. . .0.9.:.5.1.:.5.1. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-21 09-51-45-799.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15113
Entropy (8bit):	5.366190864836147
Encrypted:	false
SSDEEP:	384:1gzr3rer3rHrirAArWr1rde+e8emeCfe0evZsZuZkZmmXmXmwmPmYmXJX5XjXF0t:/BP
MD5:	23B4207C166B0162C2D9A0D624A480EE
SHA1:	7A27A65FA858002CC7E8C11F0DE40EEFB4FE2C12
SHA-256:	07FD7FEE7A710E0A399A31E15B528B7D69E7D7709A17E1356E839534C80B9312
SHA-512:	3A5A7487B2A404E7E575D19BCBB609129A860795757E563C8BD0C23EDC6D3904A79998C8B59B56F97226E3FCD6FAC193F75971D215F85D690AA0C568F0A69DDD
Malicious:	false
Preview:	SessionID=cab1dbe4-55b8-4c7b-8270-e2fb6f30f36b.1729518705807 Timestamp=2024-10-21T09:51:45:807-0400 ThreadID=7792 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=cab1dbe4-55b8-4c7b-8270-e2fb6f30f36b.1729518705807 Timestamp=2024-10-21T09:51:45:808-0400 ThreadID=7792 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=cab1dbe4-55b8-4c7b-8270-e2fb6f30f36b.1729518705807 Timestamp=2024-10-21T09:51:45:808-0400 ThreadID=7792 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=cab1dbe4-55b8-4c7b-8270-e2fb6f30f36b.1729518705807 Timestamp=2024-10-21T09:51:45:808-0400 ThreadID=7792 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=cab1dbe4-55b8-4c7b-8270-e2fb6f30f36b.1729518705807 Timestamp=2024-10-21T09:51:45:808-0400 ThreadID=7792 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.389263169546836
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2r3:r
MD5:	409866D50DCC10CBA9603ABDE07A0B1F
SHA1:	F2630683CAF55A485F374BC28A975BB85E750F29
SHA-256:	809316B04AA25BA3A5F27DEA29008FED4F3BFAF6D511DE269CDA8FFB8DEACA0F
SHA-512:	A6BCB033BF183B4488F62DACAAC7B555159C8B40E87EF57B951BA2198CD52E750DE4A206A9EA096D8119D817E6DD3BC7CCBC7F2E292EC8702D14E35FD3A37D5C
Malicious:	false
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\07c54b7f-3395-4c05-8db3-a5e818d2e1cb.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/M7ouWLaGZjZwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:RuWLaGZjZwZGk3mlind9i4ufFXpAXkru
MD5:	AE1E8A5D3E7B2198980A0CA16DE5F3D3
SHA1:	A1DB2C58AFC81E6A114A8EB47BE0243956F79460
SHA-256:	8C2E1B13F6658714D51737D6745FE065B87497923945AB3028706A4171C8328F
SHA-512:	5B36CF0982C5AFED5CCEA4B30A0B31A2B5312FBF5438623D53153E076B59F1B4BEF8C08695EA74E086BCA4EF7221889DB977B5DCFF4C684BA0683FDDECDE2EC4
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\42a342ce-c5d0-41bb-97cc-de9172b77b5c.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\439e05d4-afcc-435c-bb28-fc4f7a1aad80.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\b7c08cba-0444-40b2-b4f2-c7f241b04ed6.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1208
Entropy (8bit):	5.4647615085670616
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqFOa7JZRGNeHX+AYcvP2wk1USdYF9Yk5:lmIAq1UqFOiJZ+eHX+AdP2wyYFOk5
MD5:	D29FA9F2AB3A72F2608E8E82C8C3D1C6
SHA1:	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F
SHA-256:	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
SHA-512:	824A207E3F5AF4934B7B50FE5E3F8585FAECA571C3C39E510C06DC8FBDF3E64B07811CAAE06239936BDDDDFA4C90E534F03C0DA8147AF9294042DEA6B0FBCB94
Malicious:	false
URL:	https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.com
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>500 - Internal server error.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1208
Entropy (8bit):	5.4647615085670616
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqFOa7JZRGNeHX+AYcvP2wk1USdYF9Yk5:lmIAq1UqFOiJZ+eHX+AdP2wyYFOk5
MD5:	D29FA9F2AB3A72F2608E8E82C8C3D1C6
SHA1:	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F
SHA-256:	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
SHA-512:	824A207E3F5AF4934B7B50FE5E3F8585FAECA571C3C39E510C06DC8FBDF3E64B07811CAAE06239936BDDDDFA4C90E534F03C0DA8147AF9294042DEA6B0FBCB94
Malicious:	false
URL:	https://alanymm.com/favicon.ico
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>500 - Internal server error.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-

Static File Info

General

File type:	PDF document, version 1.4, 1 pages
Entropy (8bit):	7.1327902610850895
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF
File size:	9'599 bytes
MD5:	2a1bc3ffc00a35f2868c56972e912414
SHA1:	5fe906cc5c0a468047ede83ef58239b4fb5dfd7b
SHA256:	875e8f5bdd7f2832da82c4e4a2cadd919b0be74f6731ad6daeafe89e4d2212b0
SHA512:	d7f1f3a8bb3dcf36bef38c43fbb9520002f0c5d363734b9d8b067a3de9946c05f0f81a9959ef1824818a16b8f0ff25c428274a222645d2f40ddcc8a05bce23c9
SSDEEP:	96:VzMcH+sYVXiGRCXFsWVpG3129Tykyd/QMcr+UgnXZs/g:VzMcHTaXXsXaWVpB9cN/cr+Dpb
TLSH:	E81202413CC036507D73A00C68AE6BDF4BB8BB11E3DA54483209AB28DAD6D1AD6DB54F
File Content Preview:	%PDF-1.4.%.....3 0 obj.<</Type /Page./Parent 1 0 R./MediaBox [0 0 595.280 841.890]./TrimBox [0.000 0.000 595.280 841.890]./Resources 2 0 R./Group << /Type /Group /S /Transparency /CS /DeviceRGB >> ./Annots [ 5 0 R ] ./Contents 4 0 R>>.endobj.4 0 obj.<</Fi

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.4
Total Entropy:	7.132790
Total Bytes:	9599
Stream Entropy:	7.078356
Stream Bytes:	7598
Entropy outside Streams:	5.358139
Bytes outside Streams:	2001
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	10
endobj	10
stream	3
endstream	3
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	1
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
7	8040602010180804	4a1902511990d5e3f76e1f49def986f8
8	0000040808000000	a85cabf4935aba8ccd73fd5df76d8ddc

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 15:51:46.799249887 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 21, 2024 15:51:50.268465042 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:50.268547058 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:50.268646955 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:50.269999981 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:50.270035982 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:50.869007111 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:50.869091034 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:50.872750998 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:50.872770071 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:50.873164892 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:50.911830902 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:50.955421925 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:51.079651117 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:51.079824924 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:51.079886913 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:51.080132961 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:51.080147982 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:51.121917963 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:51.121961117 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:51.122034073 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:51.122385979 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:51.122397900 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:52.262285948 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:52.262367010 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:52.263473034 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:52.263500929 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:52.263988972 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:52.265288115 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:52.307404041 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:52.433121920 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:52.433264971 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:52.433329105 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:52.433806896 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:52.433825970 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:52.433840036 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 21, 2024 15:51:52.433846951 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 21, 2024 15:51:57.474062920 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:57.474145889 CEST	443	49742	96.17.64.171	192.168.2.4
Oct 21, 2024 15:51:57.474231958 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:57.474546909 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:57.474608898 CEST	443	49742	96.17.64.171	192.168.2.4
Oct 21, 2024 15:51:57.995184898 CEST	443	49742	96.17.64.171	192.168.2.4
Oct 21, 2024 15:51:57.995639086 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:57.995670080 CEST	443	49742	96.17.64.171	192.168.2.4
Oct 21, 2024 15:51:57.999562025 CEST	443	49742	96.17.64.171	192.168.2.4
Oct 21, 2024 15:51:57.999769926 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:58.001245975 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:58.001343012 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:58.001369953 CEST	443	49742	96.17.64.171	192.168.2.4
Oct 21, 2024 15:51:58.001704931 CEST	443	49742	96.17.64.171	192.168.2.4
Oct 21, 2024 15:51:58.045911074 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:58.045969963 CEST	443	49742	96.17.64.171	192.168.2.4
Oct 21, 2024 15:51:58.092803001 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:58.093286991 CEST	443	49742	96.17.64.171	192.168.2.4
Oct 21, 2024 15:51:58.093434095 CEST	443	49742	96.17.64.171	192.168.2.4
Oct 21, 2024 15:51:58.093596935 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:58.093745947 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:58.093745947 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:58.093799114 CEST	443	49742	96.17.64.171	192.168.2.4
Oct 21, 2024 15:51:58.093863964 CEST	49742	443	192.168.2.4	96.17.64.171
Oct 21, 2024 15:51:59.549467087 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:51:59.549505949 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:51:59.549683094 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:51:59.550559998 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:51:59.550575972 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.192110062 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.192200899 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:00.195983887 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:00.196012020 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.196422100 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.246563911 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:00.685297012 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:00.727345943 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.897250891 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.897313118 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.897332907 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.897378922 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.897432089 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.897514105 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:00.897515059 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:00.897515059 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:00.897515059 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:00.897566080 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.897599936 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.897634029 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.897638083 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:00.897659063 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:00.897660017 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.897708893 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:00.897725105 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.897842884 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:00.897888899 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:01.351414919 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:01.351480961 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:01.351563931 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:01.351583004 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:10.885096073 CEST	49753	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:10.885176897 CEST	443	49753	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:10.885272980 CEST	49753	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:10.885507107 CEST	49754	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:10.885588884 CEST	443	49754	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:10.885664940 CEST	49754	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:10.885746956 CEST	49753	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:10.885824919 CEST	443	49753	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:10.885838032 CEST	49754	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:10.885864019 CEST	443	49754	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:11.779918909 CEST	443	49754	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:11.780169010 CEST	49754	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:11.780230045 CEST	443	49754	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:11.781150103 CEST	443	49754	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:11.781224966 CEST	49754	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:11.782073021 CEST	49754	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:11.782242060 CEST	49754	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:11.782259941 CEST	443	49754	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:11.783760071 CEST	443	49753	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:11.785624981 CEST	49753	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:11.785649061 CEST	443	49753	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:11.787200928 CEST	443	49753	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:11.787273884 CEST	49753	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:11.787992001 CEST	49753	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:11.788074017 CEST	443	49753	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:11.823363066 CEST	443	49754	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:11.832384109 CEST	49754	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:11.832387924 CEST	49753	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:11.832406998 CEST	443	49753	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:11.832442045 CEST	443	49754	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:11.879733086 CEST	49754	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:11.879740000 CEST	49753	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:12.156579018 CEST	443	49754	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:12.156907082 CEST	443	49754	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:12.157114983 CEST	49754	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:12.161437988 CEST	49754	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:12.161501884 CEST	443	49754	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:12.398057938 CEST	49753	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:12.439362049 CEST	443	49753	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:12.605982065 CEST	443	49753	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:12.660375118 CEST	49753	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:12.660393953 CEST	443	49753	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:12.660861969 CEST	49753	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:12.660984039 CEST	443	49753	78.135.79.21	192.168.2.4
Oct 21, 2024 15:52:12.661041021 CEST	49753	443	192.168.2.4	78.135.79.21
Oct 21, 2024 15:52:15.200375080 CEST	49757	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:52:15.200460911 CEST	443	49757	142.250.185.132	192.168.2.4
Oct 21, 2024 15:52:15.200551033 CEST	49757	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:52:15.200835943 CEST	49757	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:52:15.200908899 CEST	443	49757	142.250.185.132	192.168.2.4
Oct 21, 2024 15:52:15.819417953 CEST	443	49757	142.250.185.132	192.168.2.4
Oct 21, 2024 15:52:15.819787025 CEST	49757	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:52:15.819817066 CEST	443	49757	142.250.185.132	192.168.2.4
Oct 21, 2024 15:52:15.821325064 CEST	443	49757	142.250.185.132	192.168.2.4
Oct 21, 2024 15:52:15.821456909 CEST	49757	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:52:15.822268963 CEST	49757	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:52:15.822365046 CEST	443	49757	142.250.185.132	192.168.2.4
Oct 21, 2024 15:52:15.875967026 CEST	49757	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:52:15.876013994 CEST	443	49757	142.250.185.132	192.168.2.4
Oct 21, 2024 15:52:15.922940969 CEST	49757	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:52:25.901371002 CEST	443	49757	142.250.185.132	192.168.2.4
Oct 21, 2024 15:52:25.901551008 CEST	443	49757	142.250.185.132	192.168.2.4
Oct 21, 2024 15:52:25.901622057 CEST	49757	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:52:25.973439932 CEST	49757	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:52:25.973503113 CEST	443	49757	142.250.185.132	192.168.2.4
Oct 21, 2024 15:52:37.738118887 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:37.738229036 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:37.738313913 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:37.738588095 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:37.738610983 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.393860102 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.393944979 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:38.397701979 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:38.397728920 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.398142099 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.405392885 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:38.447340965 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.638943911 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.639004946 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.639082909 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:38.639111996 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.639183044 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:38.640094995 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.640172005 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:38.640186071 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.640244961 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:38.641901970 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.642028093 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.642075062 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:38.642136097 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:38.643883944 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:38.643918037 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:38.643943071 CEST	49764	443	192.168.2.4	172.202.163.200
Oct 21, 2024 15:52:38.643956900 CEST	443	49764	172.202.163.200	192.168.2.4
Oct 21, 2024 15:52:41.700314999 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:41.700376034 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:41.700458050 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:41.700699091 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:41.700717926 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.231542110 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.231694937 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.232930899 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.232984066 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.233491898 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.240293980 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.283405066 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.395102978 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.395136118 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.395158052 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.395205021 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.395271063 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.395308971 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.395345926 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.415241003 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.415271997 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.415324926 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.415332079 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.415359974 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.415379047 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.477988958 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.478053093 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.478199005 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.478260040 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.478319883 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.497068882 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.497116089 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.497144938 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.497154951 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.497173071 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.497190952 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.499049902 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.499099016 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.499129057 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.499140024 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.499165058 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.499183893 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.501919985 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.501970053 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.502000093 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.502011061 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.502039909 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.502063990 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.559756994 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.559814930 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.560148001 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.560167074 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.560250044 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.578459978 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.578512907 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.578536987 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.578592062 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.578625917 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.578655005 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.579421997 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.579466105 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.579498053 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.579526901 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.579564095 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.579586029 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.581248045 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.581301928 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.581334114 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.581346035 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.581372023 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.581393003 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.582182884 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.582232952 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.582262993 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.582273960 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.582300901 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.582324028 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.584266901 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.584310055 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.584337950 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.584348917 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.584373951 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.584392071 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.585062027 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.585108042 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.585138083 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.585148096 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.585174084 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.585191011 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.641335964 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.641509056 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.641542912 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.641597033 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.641645908 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.641688108 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.641721964 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.641738892 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.678657055 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.678683996 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.678699970 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.678780079 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.678839922 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.678847075 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.679006100 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.679017067 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.679085016 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.679104090 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.680048943 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.680094957 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.680151939 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.680279016 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.680293083 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.680979967 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.681008101 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.681061983 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.681157112 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.681164980 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.681658030 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.681668043 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:42.681715965 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.681793928 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:42.681807995 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.492376089 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.492801905 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.492829084 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.493168116 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.493174076 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.494509935 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.494765997 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.494822979 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.495033026 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.495045900 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.496556044 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.496789932 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.496805906 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.496848106 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.496872902 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.497052908 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.497059107 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.497251987 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.497287989 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.497307062 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.497312069 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.497627974 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.497632027 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.497734070 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.497747898 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.587111950 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.587125063 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.587166071 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.587182045 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.587222099 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.587255955 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.587296963 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.587316036 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.587330103 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.587336063 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.589212894 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.589235067 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.589306116 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.589400053 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.589405060 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.591839075 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.591895103 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.591943026 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.591952085 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.591988087 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.592011929 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.592017889 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.592020988 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.592058897 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.592063904 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.592082024 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.592591047 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.592660904 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.592792034 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.592840910 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.592842102 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.592926979 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.592926979 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.592967033 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.592997074 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.593871117 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.594265938 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.594357014 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.594449997 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.594492912 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.594521999 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.594537973 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.594759941 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.594850063 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.594923019 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.595020056 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.595055103 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.596061945 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.596091986 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.596148014 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.596683979 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.596699953 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.597434044 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.597455025 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.597526073 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.597630024 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.597649097 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.630884886 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.631033897 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.631113052 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.631139040 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.631150007 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.631159067 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.631164074 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.632610083 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.632628918 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:43.632688046 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.632791042 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:43.632797956 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.109006882 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.109430075 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.109441042 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.109780073 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.109783888 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.113198042 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.113475084 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.113517046 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.113701105 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.113708019 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.120573044 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.120872974 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.120902061 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.121018887 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.121027946 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.142586946 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.142914057 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.142988920 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.143120050 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.143132925 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.151969910 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.152198076 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.152256012 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.152504921 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.152556896 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.208730936 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.209224939 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.209292889 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.209312916 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.209322929 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.209332943 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.209331036 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.209338903 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.211464882 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.211482048 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.211545944 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.211663008 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.211667061 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.212064981 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.212124109 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.212169886 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.212169886 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.212189913 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.212204933 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.214071035 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.214138985 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.214235067 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.214346886 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.214370966 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.216845989 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.217005968 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.217084885 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.217086077 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.217148066 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.217173100 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.218816996 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.218831062 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.218919992 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.219027996 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.219037056 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.237534046 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.238500118 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.238567114 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.238600969 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.238600969 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.238616943 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.238630056 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.240115881 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.240153074 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.240223885 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.240336895 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.240360022 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.247678041 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.247829914 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.248122931 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.248122931 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.248122931 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.250277996 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.250359058 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.250610113 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.250610113 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.250725985 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.548047066 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.548109055 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.734512091 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.735183001 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.735215902 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.735975027 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.738109112 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.738132000 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.738378048 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.738389015 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.738749027 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.738753080 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.743294001 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.743596077 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.743602991 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.743925095 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.743927956 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.769556046 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.769831896 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.769849062 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.770277977 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.770283937 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.775580883 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.775824070 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.775882006 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.776093960 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.776107073 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.830120087 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.830260992 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.830332041 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.830419064 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.830442905 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.830459118 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.830466032 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.833148956 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.833200932 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.833257914 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.833359957 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.833400965 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.836220980 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.836903095 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.836944103 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.836977005 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.836985111 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.839092016 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.839148045 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.839221001 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.839353085 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.839378119 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.839503050 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.839653969 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.839700937 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.839723110 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.839728117 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.839737892 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.839741945 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.841505051 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.841523886 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.841604948 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.841701984 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.841710091 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.866764069 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.868793964 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.868865013 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.868884087 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.868884087 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.868894100 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.868905067 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.870604038 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.870686054 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.870774984 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.870866060 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.870888948 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.872466087 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.872638941 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.872713089 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.872793913 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.872793913 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.872836113 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.872864962 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.874299049 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.874387026 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:44.874465942 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.874569893 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:44.874596119 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.359498978 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.360151052 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.360228062 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.360475063 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.360487938 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.368369102 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.368666887 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.368710041 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.368984938 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.368993044 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.372205019 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.372423887 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.372446060 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.372713089 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.372728109 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.397628069 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.398089886 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.398119926 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.398413897 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.398430109 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.402201891 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.402530909 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.402590990 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.402838945 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.402853012 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.454565048 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.454735994 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.454792976 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.455027103 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.455050945 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.455065966 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.455075979 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.458347082 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.458431005 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.458513975 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.458655119 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.458674908 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.466371059 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.466613054 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.466680050 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.466747046 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.466747046 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.466778994 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.466804028 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.468822956 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.468908072 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.468981028 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.469147921 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.469166040 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.481295109 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.481642962 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.481698990 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.481725931 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.481734037 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.481751919 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.481758118 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.484034061 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.484117031 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.484191895 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.484285116 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.484303951 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.491122961 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.491470098 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.491660118 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.491660118 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.491660118 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.493223906 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.493308067 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.493386030 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.493515968 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.493546963 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.496104002 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.496249914 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.496310949 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.496361971 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.496361971 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.496385098 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.496406078 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.497884989 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.497910976 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.497980118 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.498096943 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.498123884 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.798068047 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.798129082 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.988429070 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.989075899 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.989132881 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.989280939 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.989296913 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.991575956 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.991934061 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.992017031 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:45.992095947 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:45.992110014 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.018239021 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.018737078 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.018795967 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.018948078 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.018963099 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.022449017 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.022808075 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.022866011 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.022962093 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.022977114 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.082700968 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.082849026 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.083039999 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.083039999 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.083039999 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.085278988 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.085359097 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.085453033 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.085585117 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.085606098 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.087776899 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.088098049 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.088304043 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.088304996 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.088304996 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.089936972 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.090018034 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.090338945 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.090338945 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.090461969 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.117046118 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.117093086 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.117233038 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.117254972 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.117445946 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.117964029 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.117964029 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.118001938 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.118001938 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.118029118 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.118063927 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.118092060 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.118128061 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.119443893 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.119529009 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.119612932 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.119976997 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.119995117 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.120017052 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.120074987 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.120168924 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.120240927 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.120263100 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.391818047 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.391880035 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.391885042 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.391944885 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.678248882 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.678817034 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.678896904 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.679224014 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.679275990 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.766661882 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.766983032 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.767043114 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.767294884 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.767313004 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.769026041 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.769422054 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.769481897 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.769799948 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.769854069 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.774610996 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.774853945 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.774913073 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.775228024 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.775280952 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.777148008 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.777296066 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.777364016 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.777441025 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.777441025 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.777482033 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.777512074 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.779225111 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.779535055 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.779611111 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.779755116 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.779840946 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.779932022 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.779953957 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.780006886 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.780033112 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.780052900 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.866205931 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.866261005 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.866336107 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.866409063 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.866534948 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.866535902 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.866534948 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.866578102 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.866605043 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.866736889 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.866736889 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.866736889 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.868989944 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.869054079 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.869072914 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.869137049 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.869155884 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.869219065 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.869302988 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.869318008 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.869338036 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.869340897 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.876072884 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.876256943 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.876322031 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.876365900 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.876365900 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.876388073 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.876422882 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.878057957 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.878139019 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.878252983 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.878343105 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.878365040 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.886719942 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.887254953 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.887443066 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.887443066 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.887443066 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.888798952 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.888880014 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:46.888968945 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.889066935 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:46.889086962 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.173043966 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.173105001 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.188812971 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.188874006 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.314766884 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.315473080 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.315532923 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.315718889 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.315732956 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.404234886 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.404685974 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.404782057 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.404841900 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.405138016 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.405179977 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.405190945 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.405240059 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.405812979 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.405865908 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.408891916 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.409099102 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.409267902 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.409267902 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.409267902 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.410758972 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.411381960 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.411441088 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.411556005 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.411570072 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.412226915 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.412266016 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.412333965 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.412492990 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.412527084 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.412542105 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.412941933 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.413001060 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.413305998 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.413357973 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.500699043 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.500772953 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.500883102 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.500957012 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.500957012 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.500998020 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.501025915 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.501108885 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.501282930 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.501447916 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.502244949 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.502283096 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.502325058 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.502340078 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.504473925 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.504621983 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.504683971 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.505572081 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.505600929 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.505673885 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.509216070 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.509228945 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.509255886 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.509320021 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.509352922 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.509354115 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.509368896 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.509388924 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.509423971 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.509645939 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.510098934 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.510116100 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.510327101 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.510340929 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.510343075 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.510344028 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.510406971 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.510442019 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.512083054 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.512089968 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.512149096 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.512286901 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.512300014 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.512926102 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.512989998 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.513061047 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.513139009 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.513159990 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.626235008 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.626297951 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.941463947 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.942100048 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.942128897 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:47.942380905 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:47.942388058 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.027782917 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.028269053 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.028297901 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.028472900 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.028481007 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.033653975 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.033972025 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.033998966 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.034255028 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.034265041 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.034621954 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.034689903 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.034944057 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.034959078 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.034989119 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.034996033 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.035324097 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.035327911 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.035660028 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.035665035 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.036868095 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.037183046 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.037266016 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.037308931 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.037322044 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.037338018 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.037344933 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.039901972 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.039940119 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.040021896 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.040230989 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.040237904 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.121942043 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.122179031 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.122348070 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.122348070 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.122348070 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.124568939 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.124649048 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.124742985 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.124900103 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.124918938 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.130306959 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.130517960 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.130598068 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.130645037 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.130645037 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.130667925 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.130691051 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.132129908 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.132848024 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.132873058 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.132946968 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.133021116 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.133105040 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.133157969 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.133169889 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.133183002 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.133183002 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.133224964 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.133251905 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.133907080 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.134042978 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.134108067 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.134120941 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.134124041 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.134131908 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.134135962 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.135504961 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.135525942 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.135637999 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.135710001 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.135718107 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.135963917 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.135993004 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.136065960 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.136230946 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.136248112 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.423091888 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.423125029 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.561578035 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.562104940 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.562139988 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.562462091 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.562469959 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.655904055 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.656055927 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.656236887 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.656270981 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.656270981 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.656294107 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.656306982 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.659024000 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.659051895 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.659133911 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.659353971 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.659368038 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.659567118 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.659905910 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.659913063 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.660239935 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.660243034 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.663208008 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.663491011 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.663532019 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.663723946 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.663753033 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.663758993 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.663975954 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.663991928 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.664242983 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.664248943 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.669795990 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.670042038 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.670070887 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.670317888 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.670325041 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.753032923 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.753245115 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.753314018 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.753360033 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.753371000 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.753381014 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.753385067 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.755614042 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.755657911 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.755738020 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.755908966 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.755928040 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.758568048 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.759119987 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.759191990 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.759231091 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.759242058 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.759255886 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.759263992 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.759644032 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.759794950 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.759865046 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.759885073 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.759893894 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.759910107 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.759915113 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.761549950 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.761559963 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.761570930 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.761616945 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.761645079 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.761703014 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.761781931 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.761812925 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.761871099 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.761888027 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.763906956 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.764090061 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.764143944 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.764188051 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.764211893 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.764236927 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.764249086 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.766315937 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.766340017 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:48.766416073 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.766561031 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:48.766577959 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.182284117 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.182797909 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.182828903 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.183063030 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.183068991 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.278383970 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.278532982 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.278692961 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.278692961 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.278692961 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.279782057 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.280189037 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.280217886 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.280437946 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.280446053 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.280967951 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.281049013 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.281184912 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.281297922 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.281306982 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.283597946 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.283839941 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.283852100 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.284117937 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.284123898 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.284857035 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.285053968 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.285075903 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.285288095 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.285295010 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.286186934 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.286366940 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.286377907 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.286597013 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.286602974 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.376682997 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.376940966 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.377099037 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.377099991 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.377099991 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.378849030 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.378933907 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.379021883 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.379117966 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.379138947 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.379550934 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.379656076 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.379729033 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.379785061 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.379792929 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.379843950 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.379848003 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.379848003 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.379875898 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.379879951 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.379879951 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.379898071 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.379904985 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.379911900 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.382386923 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.382467985 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.382565975 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.382911921 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.382934093 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.382989883 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.382991076 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.383004904 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.383037090 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.383042097 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.383068085 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.383076906 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.383085966 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.383157969 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.383172035 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.383188009 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.383194923 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.384634018 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.384655952 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.384740114 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.384829998 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.384854078 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.579175949 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.579210997 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:49.688694000 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:49.688725948 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.242619038 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.243182898 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.243244886 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.243541002 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.243556023 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.250922918 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.251375914 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.251435995 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.251724958 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.251738071 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.254342079 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.254427910 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.255378008 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.255419016 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.255866051 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.255882025 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.255917072 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.255923986 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.256210089 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.256220102 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.257069111 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.257316113 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.257329941 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.257641077 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.257651091 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.337779999 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.337894917 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.338073969 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.338074923 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.338074923 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.340607882 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.340692997 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.340790033 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.340930939 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.340954065 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.350044012 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.350246906 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.350306988 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.350370884 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.350370884 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.350404024 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.350430965 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.350460052 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.351425886 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.351492882 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.351669073 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.351670027 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.351670027 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.351965904 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.352039099 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.352072001 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.352087021 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.352087021 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.352118015 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.352121115 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.352140903 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.352191925 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.352300882 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.352324009 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.354125977 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.354167938 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.354224920 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.354242086 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.354244947 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.354305983 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.354338884 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.354358912 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.354446888 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.354470015 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.357966900 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.358412981 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.358473063 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.358510971 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.358510971 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.358529091 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.358551025 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.360240936 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.360275984 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.360336065 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.360498905 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.360517025 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.641916037 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.641983032 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.657383919 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.657399893 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.856362104 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.856950045 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.857032061 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.857309103 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.857322931 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.873895884 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.874145031 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.874223948 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.874486923 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.874500990 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.896178961 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.896568060 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.896625996 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.896706104 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.896719933 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.900122881 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.900352955 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.900408983 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.900616884 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.900630951 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.901446104 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.901645899 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.901659966 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.901907921 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.901911974 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.950977087 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.951102018 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.951366901 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.951366901 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.951368093 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.953481913 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.953527927 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.953623056 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.953707933 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.953717947 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.969491005 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.969902039 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.969983101 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.970128059 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.970128059 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.970170975 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.970202923 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.971879959 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.971915960 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.971992016 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.972115040 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.972125053 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.991306067 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.991492987 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.991667986 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.991668940 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.991668940 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.993243933 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.993283033 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.993350029 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.993422031 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.993468046 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.993479013 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.993580103 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.993653059 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.993753910 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.993753910 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.993794918 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.993827105 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.994333982 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.995244026 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.995310068 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.995332003 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.995333910 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.995345116 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.995358944 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.995362997 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.995366096 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.995418072 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.995512009 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.995521069 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.996994972 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.997056007 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:50.997138023 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.997243881 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:50.997263908 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.251099110 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.251159906 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.298119068 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.298180103 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.493264914 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.493649006 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.493662119 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.494039059 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.494044065 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.521662951 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.521959066 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.521986961 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.522140026 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.522252083 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.522257090 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.522336960 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.522355080 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.522404909 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.522587061 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.522591114 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.522602081 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.522641897 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.522985935 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.523000002 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.589023113 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.589761019 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.589824915 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.589848042 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.589859962 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.589869022 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.589874029 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.592051983 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.592135906 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.592220068 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.592349052 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.592366934 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.636461020 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.636615038 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.636698008 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.636779070 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.636779070 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.636821985 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.636848927 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.636996031 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.637136936 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.637211084 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.637293100 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.637370110 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.637428999 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.637840033 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.637840033 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.637891054 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.637917042 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.638540030 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.638586044 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.638617039 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.638633013 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.640634060 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.640680075 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.640758038 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.641598940 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.641693115 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.641767025 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.641927958 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.641959906 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.642007113 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.642044067 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.642553091 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.642635107 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.642740965 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.642857075 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.642889023 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.778002024 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.778376102 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.778397083 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.778760910 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.778764963 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.873347998 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.873394966 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.873445988 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.873549938 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.873564959 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.873574972 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.873579979 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.875477076 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.875559092 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:51.875653982 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.875777960 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:51.875797987 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.121484995 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.121961117 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.122039080 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.122306108 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.122322083 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.164226055 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.164571047 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.164653063 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.164839029 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.164906025 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.164921045 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.165096045 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.165137053 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.165384054 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.165397882 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.190483093 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.190843105 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.190927029 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.190989971 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.191004038 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.219953060 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.220259905 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.220339060 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.220418930 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.220418930 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.220463037 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.220489025 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.222784996 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.222871065 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.222965956 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.223062038 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.223082066 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.261197090 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.261729956 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.261790991 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.261812925 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.261812925 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.261887074 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.261920929 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.261923075 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.262027025 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.262094021 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.262094021 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.262125969 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.262156963 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.263761997 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.263820887 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.263844967 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.263900995 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.263935089 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.263984919 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.264070988 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.264094114 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.264095068 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.264113903 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.284971952 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.285176992 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.285378933 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.285378933 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.285867929 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.285907030 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.286664009 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.286744118 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.286827087 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.286931992 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.286955118 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.398890018 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.399269104 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.399347067 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.399624109 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.399641037 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.494810104 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.494844913 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.495029926 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.495112896 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.495114088 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.495157957 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.495186090 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.497286081 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.497368097 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:52.497451067 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.497607946 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:52.497646093 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.105734110 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.106395960 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.106455088 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.106656075 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.106661081 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.106667042 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.106676102 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.106959105 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.107017040 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.107170105 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.107229948 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.107244015 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.107264996 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.107522011 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.107536077 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.192089081 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.192403078 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.192433119 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.192845106 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.192898035 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.197855949 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.198110104 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.198167086 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.198337078 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.198349953 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.202071905 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.202291965 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.202323914 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.202372074 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.202447891 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.202447891 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.202491999 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.202522993 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.202574015 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.202636957 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.202685118 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.202685118 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.202717066 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.202739954 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.204792976 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.204837084 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.204842091 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.204907894 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.204931021 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.204998016 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.205034018 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.205050945 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.205106020 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.205123901 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.259637117 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.259699106 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.259881020 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.259881973 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.259881973 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.261625051 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.261706114 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.261806011 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.261909008 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.261929035 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.287400007 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.287436008 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.287616968 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.287616968 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.287694931 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.287730932 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.289248943 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.289288998 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.289365053 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.289480925 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.289500952 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.293580055 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.293911934 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.293979883 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.294051886 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.294051886 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.294090986 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.294118881 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.295651913 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.295696020 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.295773983 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.295907974 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.295939922 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.563657999 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.563718081 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.742187023 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.742671967 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.742747068 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.743072987 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.743087053 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.794017076 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.794408083 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.794488907 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.794569969 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.794584990 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.818623066 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.819020987 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.819108963 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.819190979 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.819206953 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.828974962 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.829417944 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.829476118 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.829833031 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.829885960 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.836611032 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.836771011 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.836874008 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.836874962 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.836874962 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.839330912 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.839417934 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.839556932 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.839684010 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.839704037 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.888041019 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.888201952 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.888392925 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.888394117 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.888394117 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.890223026 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.890305042 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.890446901 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.890551090 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.890572071 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.918073893 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.918112040 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.918168068 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.918258905 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.918311119 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.918342113 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.918358088 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.919965029 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.920043945 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.920133114 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.920243979 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.920265913 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.924832106 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.924885035 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.925009012 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.925030947 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.925061941 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.925100088 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.925120115 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.925134897 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.925142050 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.926774979 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.926803112 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:53.926873922 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.926980972 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:53.926991940 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.038485050 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.039052963 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.039103031 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.039360046 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.039366961 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.136065006 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.136116028 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.136177063 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.136209011 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.136255026 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.136410952 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.136410952 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.136410952 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.139043093 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.139081955 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.139159918 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.139297962 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.139305115 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.141678095 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.141737938 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.188657999 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.188716888 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.219943047 CEST	49723	80	192.168.2.4	2.19.126.163
Oct 21, 2024 15:52:54.220149040 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 21, 2024 15:52:54.225847006 CEST	80	49723	2.19.126.163	192.168.2.4
Oct 21, 2024 15:52:54.225899935 CEST	49723	80	192.168.2.4	2.19.126.163
Oct 21, 2024 15:52:54.226433039 CEST	80	49724	93.184.221.240	192.168.2.4
Oct 21, 2024 15:52:54.226596117 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 21, 2024 15:52:54.361576080 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.364480972 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.364526987 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.364984989 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.364996910 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.411566019 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.411984921 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.412043095 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.412317038 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.412329912 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.438496113 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.438555002 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.438590050 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.438949108 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.439032078 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.439215899 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.439230919 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.448695898 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.448950052 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.448972940 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.449295998 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.449301004 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.457622051 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.457679987 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.457755089 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.457781076 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.457847118 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.457847118 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.457870007 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.457905054 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.458209991 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.458287954 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.458340883 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.460139990 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.460159063 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.460221052 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.460369110 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.460376024 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.507014990 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.507039070 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.507102966 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.507160902 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.507265091 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.507265091 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.507308006 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.507472992 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.507508993 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.507555008 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.509151936 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.509185076 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.509234905 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.509332895 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.509339094 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.534136057 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.534187078 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.534313917 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.534425020 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.534461975 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.534487009 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.534499884 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.536307096 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.536364079 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.536427021 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.536562920 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.536592960 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.543230057 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.543421030 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.543483019 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.543503046 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.543509007 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.543518066 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.543521881 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.545200109 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.545228004 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.545283079 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.545418978 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.545432091 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.662329912 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.662617922 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.662645102 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.662899971 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.662906885 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.756875038 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.757033110 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.757095098 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.757272005 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.757294893 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.757308960 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.757316113 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.759676933 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.759763002 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.759861946 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.759994030 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.760016918 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.983189106 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.983676910 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.983697891 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:54.984044075 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:54.984047890 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.030061960 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.030529022 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.030558109 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.030735970 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.030742884 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.060317039 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.060724020 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.060784101 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.061058044 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.061074018 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.070122004 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.070391893 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.070453882 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.070734978 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.070749044 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.078152895 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.078294039 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.078363895 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.078392029 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.078408003 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.078418970 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.078423977 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.080748081 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.080806017 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.080878019 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.081001997 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.081018925 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.141061068 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.141204119 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.141263008 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.141489029 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.141489029 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.141510010 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.141524076 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.143253088 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.143337011 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.143419981 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.143536091 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.143553972 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.156721115 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.156771898 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.156846046 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.156919956 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.156958103 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.157002926 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.157020092 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.158538103 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.158581018 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.158660889 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.158773899 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.158798933 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.169647932 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.169785976 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.169986010 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.170064926 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.170064926 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.170105934 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.170135021 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.171961069 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.172003984 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.172086000 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.172198057 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.172226906 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.292896986 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.293303013 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.293366909 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.293761969 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.293814898 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.390125990 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.390278101 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.390485048 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.390485048 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.390485048 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.395292997 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.395322084 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.395385981 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.395498991 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.395507097 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.612998962 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.613461971 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.613523006 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.613935947 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.613950968 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.672890902 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.673429012 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.673507929 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.673609018 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.673624039 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.682018042 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.682363033 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.682424068 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.682544947 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.682559967 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.701800108 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.702435970 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.702497005 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.702604055 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.702620029 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.704368114 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.704427958 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.718523979 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.718656063 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.718724012 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.718878984 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.718878984 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.718910933 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.718938112 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.721041918 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.721079111 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.721142054 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.721244097 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.721251965 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.769354105 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.769422054 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.769485950 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.769730091 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.769730091 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.769752979 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.769774914 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.771997929 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.772028923 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.772103071 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.772218943 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.772224903 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.779149055 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.779181957 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.779212952 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.779251099 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.779299974 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.779375076 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.779376030 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.779407024 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.779432058 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.781366110 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.781394005 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.781466007 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.781579018 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.781596899 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.797696114 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.797837019 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.797940969 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.797992945 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.797992945 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.798012972 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.798033953 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.800004959 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.800013065 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:55.800088882 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.800225019 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:55.800237894 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:56.973386049 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:56.973891020 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:56.973913908 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:56.974157095 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:56.974164963 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:56.974940062 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:56.975200891 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:56.975259066 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:56.975461006 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:56.975475073 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:56.979870081 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:56.980077028 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:56.980103016 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:56.980350018 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:56.980356932 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:56.983041048 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:56.983237028 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:56.983258963 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:56.983490944 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:56.983496904 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.069802999 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.069840908 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.069885969 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.070024967 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.070046902 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.070070028 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.070076942 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.070207119 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.070275068 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.070336103 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.070374966 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.070405006 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.070456982 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.070501089 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.070501089 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.070533037 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.070561886 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.072611094 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.072674990 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.072679043 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.072757959 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.072760105 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.072830915 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.072901011 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.072935104 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.072942972 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.072977066 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.074671030 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.074727058 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.074775934 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.074848890 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.074856043 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.074886084 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.074891090 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.076500893 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.076522112 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.076603889 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.076710939 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.076734066 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.081463099 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.081645012 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.081716061 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.081784964 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.081793070 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.081803083 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.081808090 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.083724976 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.083745956 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.083830118 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.083925009 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.083936930 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.413094044 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.413628101 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.413646936 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.413908005 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.413912058 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.508080959 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.508120060 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.508179903 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.508197069 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.508220911 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.508281946 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.508364916 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.508373022 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.508382082 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.508385897 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.511002064 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.511101961 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.511178017 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.511408091 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.511450052 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.591788054 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.592329979 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.592359066 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.592605114 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.592612028 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.592864037 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.593055964 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.593099117 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.593154907 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.593281031 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.593297005 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.593394995 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.593409061 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.593684912 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.593693972 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.693698883 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.693744898 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.693959951 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.693959951 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.693959951 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.694220066 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.694264889 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.694427013 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.694503069 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.694581032 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.694581032 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.694622040 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.694650888 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.695935011 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.696018934 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.696105003 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.696144104 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.696188927 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.696211100 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.696230888 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.696249008 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.696335077 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.696343899 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.700958014 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.701112986 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.702795029 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.702797890 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.702797890 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.702827930 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.702836990 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.702867031 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.702905893 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.703052998 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.703080893 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.922338009 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.923261881 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.923319101 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:57.923513889 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:57.923540115 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.001331091 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.001390934 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.019121885 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.019155025 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.019201040 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.019359112 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.019359112 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.019454956 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.019454956 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.019494057 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.019525051 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.022192955 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.022281885 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.022592068 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.022592068 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.022718906 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.038175106 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.038455963 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.038486958 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.038870096 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.038877010 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.134736061 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.134896040 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.135087013 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.136905909 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.136905909 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.136950016 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.136976957 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.137013912 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.137094975 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.137183905 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.137470007 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.137547970 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.233764887 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.234450102 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.234508991 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.234606981 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.234621048 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.245281935 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.245594025 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.245655060 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.245917082 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.245932102 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.249166965 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.249443054 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.249458075 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.249742985 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.249759912 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.329503059 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.329631090 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.329668045 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.329824924 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.329824924 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.329824924 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.329914093 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.329948902 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.332511902 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.332596064 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.332693100 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.332822084 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.332842112 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.341238976 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.341383934 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.341469049 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.341551065 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.341551065 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.341573000 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.341584921 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.343694925 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.343707085 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.343734980 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.343812943 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.343867064 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.343950033 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.343986988 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.344002962 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.344028950 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.344028950 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.344068050 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.344096899 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.346139908 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.346184969 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.346262932 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.346385956 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.346415997 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.543286085 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.543729067 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.543801069 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.544336081 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.544349909 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.642446041 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.642518997 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.642765999 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.642765999 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.645565987 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.645575047 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.645595074 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.645682096 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.645776033 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.645909071 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.645927906 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.661926985 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.662345886 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.662400961 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.662774086 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.662786961 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.756997108 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.757081985 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.757199049 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.757291079 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.757523060 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.757523060 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.757524014 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.760396957 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.760478020 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.760740042 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.760848045 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.760875940 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.864099026 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.864936113 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.864983082 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.865432024 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.865444899 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.873802900 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.874439001 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.874497890 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.874697924 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.874712944 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.962373018 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.962538958 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.962776899 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.962845087 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.962867022 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.962882996 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.962891102 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.966197968 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.966286898 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.966391087 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.966582060 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.966602087 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.968321085 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.968482971 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.968559027 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.968632936 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.968632936 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.968674898 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.968703985 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.971224070 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.971306086 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:58.971421003 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.971618891 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:58.971656084 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.053333998 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.053977966 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.054003000 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.054513931 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.054518938 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.063673019 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.063703060 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.148139000 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.148269892 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.148361921 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.148468018 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.148483038 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.148494005 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.148499012 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.151654959 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.151741982 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.151830912 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.151992083 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.152029037 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.166673899 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.167241096 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.167329073 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.167665958 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.167681932 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.265280962 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.265407085 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.265506029 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.265691042 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.265691042 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.266021013 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.266021013 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.266088963 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.266124010 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.269058943 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.269145966 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.269355059 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.269467115 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.269485950 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.281614065 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.282268047 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.282351971 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.282849073 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.282902956 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.380064964 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.380265951 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.380477905 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.380559921 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.380559921 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.380599976 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.380635977 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.383253098 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.383362055 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.383471012 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.383636951 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.383656979 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.491393089 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.491838932 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.491897106 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.492554903 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.492567062 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.494656086 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.495059013 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.495141029 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.495726109 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.495738983 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.586577892 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.586735964 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.586829901 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.586985111 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.587030888 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.587061882 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.587078094 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.591016054 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.591178894 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.591255903 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.591655016 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.591686010 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.591753960 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.591814995 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.591814995 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.591860056 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.591886997 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.592350960 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.592366934 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.594891071 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.594926119 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.595016956 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.595168114 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.595186949 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.669972897 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.670676947 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.670738935 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.671220064 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.671233892 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.765964985 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.766002893 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.766052961 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.766093016 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.766160011 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.766341925 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.766383886 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.766412020 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.766427040 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.769082069 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.769110918 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.769196987 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.769366980 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.769372940 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.814984083 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.815538883 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.815591097 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.815963030 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.815975904 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.909714937 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.910496950 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.910586119 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.911010027 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.911062956 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.913806915 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.913971901 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.914045095 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.914371014 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.914371014 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.914433956 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.914469004 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.917066097 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.917118073 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 21, 2024 15:52:59.917558908 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.917618990 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:52:59.917633057 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.007729053 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.007939100 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.008152962 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.008491039 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.008491039 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.008554935 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.008590937 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.011378050 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.011406898 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.011595011 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.011688948 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.011694908 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.117929935 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.118958950 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.119003057 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.119405985 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.119434118 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.120207071 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.120820045 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.120851040 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.121249914 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.121278048 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.214646101 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.214814901 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.215084076 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.215084076 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.215084076 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.217672110 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.217711926 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.217803001 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.218014002 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.218035936 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.218544960 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.218616009 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.218672037 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.218704939 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.218729973 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.218796968 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.218822956 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.218837976 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.218837976 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.218847990 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.218856096 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.221429110 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.221512079 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.221628904 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.221757889 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.221786022 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.287627935 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.288348913 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.288372040 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.288744926 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.288752079 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.385770082 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.385807991 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.385910034 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.386202097 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.386202097 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.386223078 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.386233091 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.388950109 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.389030933 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.389133930 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.389323950 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.389343023 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.423052073 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.423060894 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.440154076 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.440670013 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.440701008 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.441082001 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.441090107 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.534976006 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.535043001 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.535089970 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.535104990 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.535137892 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.535181999 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.535201073 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.535216093 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.535228968 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.535235882 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.537604094 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.537686110 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.537775040 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.537921906 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.537944078 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.541939020 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.542375088 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.542397976 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.542893887 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.542897940 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.739903927 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.740494967 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.740513086 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.740998983 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.741003990 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.743285894 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.743611097 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.743671894 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.744061947 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.744076014 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.835114002 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.835186005 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.835287094 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.835400105 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.835400105 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.835730076 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.835730076 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.835793018 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.835827112 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.838702917 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.838746071 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.838826895 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.839035988 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.839046001 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.839539051 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.839776039 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.840002060 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.840002060 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.840081930 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.840118885 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.843147039 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.843228102 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.843329906 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.843530893 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.843554974 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.905108929 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.905831099 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.905858994 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:00.906281948 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:00.906287909 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.000051022 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.000257015 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.000286102 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.000468016 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.000468969 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.000590086 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.000633001 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.000662088 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.000668049 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.003777981 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.003801107 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.003886938 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.004061937 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.004070044 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.063541889 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.064250946 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.064311028 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.064599991 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.064615011 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.107825994 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.108783960 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.108992100 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.108993053 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.108993053 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.111845016 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.111880064 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.111954927 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.112138033 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.112144947 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.172696114 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.172848940 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.173146963 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.173147917 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.173147917 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.176537037 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.176577091 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.176666975 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.176871061 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.176889896 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.373344898 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.373543978 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.374043941 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.374072075 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.374090910 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.374109030 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.374608040 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.374623060 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.374718904 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.374723911 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.423096895 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.423160076 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.469999075 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.470362902 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.470652103 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.470669985 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.470670938 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.470670938 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.470733881 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.470786095 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.470802069 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.470844984 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.470904112 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.470917940 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.470928907 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.470928907 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.470936060 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.470941067 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.474170923 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.474211931 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.474255085 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.474293947 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.474353075 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.474390030 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.474535942 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.474555969 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.474572897 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.474592924 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.485553980 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.485615015 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.525211096 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.525625944 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.525645971 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.526359081 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.526365995 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.636748075 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.636790991 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.636845112 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.637012005 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.637025118 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.637034893 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.637037992 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.639203072 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.639223099 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.639303923 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.639414072 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.639420033 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.644128084 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.644596100 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.644650936 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.645059109 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.645071030 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.728058100 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.728559017 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.728620052 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.728791952 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.728806019 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.740155935 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.740312099 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.740380049 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.740451097 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.740451097 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.740493059 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.740525007 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.742116928 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.742147923 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.742207050 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.742295027 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.742305994 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.782432079 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.782493114 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.821993113 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.822091103 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.822208881 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.822280884 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.822282076 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.822370052 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.822370052 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.822410107 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.822438955 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.823967934 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.823995113 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:01.824065924 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.824188948 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:01.824207067 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.001405954 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.001877069 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.001934052 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.002253056 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.002265930 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.002604008 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.002844095 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.002907038 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.003113031 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.003128052 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.103965044 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.104007959 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.104396105 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.104521036 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.104556084 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.104594946 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.104594946 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.104619980 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.104701996 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.104701996 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.104705095 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.104705095 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.104743958 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.104744911 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.104769945 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.104773998 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.106885910 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.106930017 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.106942892 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.106973886 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.107011080 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.107059002 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.107147932 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.107153893 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.107157946 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.107173920 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.157546997 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.157947063 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.157965899 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.158210993 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.158217907 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.252784967 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.252824068 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.252892017 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.253038883 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.253046036 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.253086090 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.253089905 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.254726887 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.254807949 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.254892111 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.254976988 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.254995108 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.271966934 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.272270918 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.272284985 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.272599936 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.272604942 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.367292881 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.367412090 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.367470026 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.367568016 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.367588997 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.367599010 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.367604017 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.369710922 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.369781017 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.369867086 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.369982004 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.369998932 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.638689041 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.639085054 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.639103889 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.639465094 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.639472008 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.642925978 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.643281937 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.643325090 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.643656969 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.643665075 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.733479023 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.733571053 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.733714104 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.733891964 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.733902931 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.733935118 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.733938932 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.736476898 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.736560106 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.736658096 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.736771107 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.736792088 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.738408089 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.738478899 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.738528967 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.738542080 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.738589048 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.738636017 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.738686085 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.738686085 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.738701105 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.738713026 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.740447044 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.740462065 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.740529060 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.740637064 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.740642071 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.778395891 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.778677940 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.778733015 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.778990030 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.779002905 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.874497890 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.876255989 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.876292944 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.876415014 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.876415968 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.876415968 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.876415968 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.877875090 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.877895117 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.877958059 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.878045082 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.878050089 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.903673887 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.903959990 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.904028893 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:02.904241085 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:02.904259920 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.004318953 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.004479885 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.004662991 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.006529093 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.006529093 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.006552935 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.006571054 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.006707907 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.006745100 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.006800890 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.006908894 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.006917000 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.188653946 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.188714027 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.256756067 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.257215977 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.257291079 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.257618904 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.257635117 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.268887997 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.269193888 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.269210100 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.269522905 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.269527912 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.353621006 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.353694916 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.353892088 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.354000092 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.354000092 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.354043961 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.354082108 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.356614113 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.356651068 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.356745005 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.356897116 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.356906891 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.367311001 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.367508888 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.367566109 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.367595911 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.367609978 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.367619038 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.367623091 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.369421005 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.369503021 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.369591951 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.369687080 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.369708061 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.397021055 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.397401094 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.397412062 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.397774935 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.397778988 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.496223927 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.496268988 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.496478081 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.496550083 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.496550083 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.496556997 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.496579885 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.498627901 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.498711109 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.498814106 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.498930931 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.498950005 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.531454086 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.531984091 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.532011032 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.532365084 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.532368898 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.635296106 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.635485888 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.635679007 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.635723114 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.635736942 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.635746956 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.635751009 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.637494087 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.637574911 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.637654066 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.637747049 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.637764931 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.894109964 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.894488096 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.894519091 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.894855022 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.894860029 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.899701118 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.900043964 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.900104046 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.900299072 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.900312901 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.990405083 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.991409063 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.991602898 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.991604090 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.991604090 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.993566036 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.993648052 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.993748903 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.993850946 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.993870020 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.996052027 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.996201992 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.996314049 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.996315002 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.996315002 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.997975111 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.998066902 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:03.998142958 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.998239994 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:03.998271942 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.015805960 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.016412020 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.016494036 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.016635895 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.016649961 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.113102913 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.113121033 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.113147974 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.113404036 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.113500118 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.113500118 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.113542080 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.113574982 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.115833998 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.115916014 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.116189957 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.116189957 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.116316080 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.163384914 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.163764954 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.163822889 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.164094925 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.164109945 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.258294106 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.258462906 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.258691072 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.258691072 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.260437012 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.260474920 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.260545969 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.260631084 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.260723114 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.260827065 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.260847092 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.297945023 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.297964096 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.298041105 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.298100948 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.411866903 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.412436008 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.412466049 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.412698984 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.412705898 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.673000097 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.673150063 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.673305035 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.673520088 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.673530102 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.673541069 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.673546076 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.675512075 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.675594091 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.675672054 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.675791979 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.675815105 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.762360096 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.763078928 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.763139009 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.763382912 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.763397932 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.767750978 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.768107891 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.768192053 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.768296957 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.768311977 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.769231081 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.769561052 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.769623041 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.769738913 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.769756079 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.789704084 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.790071011 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.790147066 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.790225983 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.790240049 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.861562014 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.862040043 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.862318993 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.862318993 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.862318993 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.864294052 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.864381075 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.864470959 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.864592075 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.864615917 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.866641045 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.866660118 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.866700888 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.866832972 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.866832972 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.866919994 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.866919994 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.866959095 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.866991043 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.868686914 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.868768930 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.868854046 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.868998051 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.869035006 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.885173082 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.885268927 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.885303974 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.885344982 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.885701895 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.885703087 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.885703087 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.886982918 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.887065887 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:04.887155056 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.887270927 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:04.887290955 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.172941923 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.173002958 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.188656092 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.188720942 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.200532913 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.201033115 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.201091051 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.201231956 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.201247931 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.296335936 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.296406984 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.296524048 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.296720028 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.296720982 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.296720982 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.296720982 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.299149990 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.299232960 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.299361944 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.299474001 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.299494028 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.379476070 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.379978895 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.380043030 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.380296946 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.380311012 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.387995005 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.388257027 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.388317108 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.388514042 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.388528109 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.415987968 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.416313887 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.416373968 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.416580915 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.416596889 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.438195944 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.438368082 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.438529015 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.438529015 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.438529015 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.440748930 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.440773010 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.440846920 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.440984011 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.440995932 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.476918936 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.476970911 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.477147102 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.477147102 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.477147102 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.478920937 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.478948116 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.479114056 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.479151011 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.479160070 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.484967947 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.484997034 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.485030890 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.485049009 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.485111952 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.485196114 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.485238075 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.485270023 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.485285044 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.486912966 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.486924887 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.486990929 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.487101078 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.487106085 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.512326002 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.512372017 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.512557983 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.512639046 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.512639999 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.512681961 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.512712002 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.514318943 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.514343977 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.514430046 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.514545918 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.514552116 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.610425949 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.610486984 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.751183033 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.751252890 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.782460928 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.782525063 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.822216988 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.822788954 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.822871923 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.823193073 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.823246956 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.983192921 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.983684063 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.983707905 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.983886957 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.983891964 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.995572090 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.995814085 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.995846033 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:05.996201992 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:05.996207952 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.003812075 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.004019976 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.004029036 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.004287958 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.004292011 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.038147926 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.038635015 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.038655043 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.038678885 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.038685083 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.066823006 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.066874981 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.066978931 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.067039013 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.067075968 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.067135096 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.067135096 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.067181110 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.067210913 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.069705009 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.069789886 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.069912910 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.070017099 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.070039034 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.079621077 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.079695940 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.079747915 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.079797983 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.079803944 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.079806089 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.079848051 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.079855919 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.079874992 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.082103014 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.082185030 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.082278967 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.082374096 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.082392931 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.090300083 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.090743065 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.090785027 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.090807915 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.090836048 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.090995073 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.090995073 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.091017008 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.091027975 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.092757940 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.092838049 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.092921972 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.093056917 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.093080044 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.098608971 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.098725080 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.098768950 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.098793030 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.098797083 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.098805904 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.098809004 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.100449085 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.100529909 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.100610018 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.100702047 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.100733995 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.133979082 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.134149075 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.134296894 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.134516954 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.134516954 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.134537935 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.134548903 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.135863066 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.135950089 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.136024952 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.136116982 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.136136055 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.592597008 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.593031883 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.593050003 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.593436956 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.593442917 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.605463028 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.605846882 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.605874062 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.606235981 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.606241941 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.611360073 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.611692905 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.611723900 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.612112045 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.612123013 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.635346889 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.635646105 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.635704041 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.636013031 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.636027098 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.658751965 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.659024000 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.659087896 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.659411907 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.659425974 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.687508106 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.687695026 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.687763929 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.687819004 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.687819958 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.687849045 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.687870026 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.690462112 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.690547943 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.690629959 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.690817118 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.690850973 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.718739033 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.718806028 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.718864918 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.718923092 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.718959093 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.719160080 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.719161034 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.719161034 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.719552994 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.719602108 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.719671965 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.719724894 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.719724894 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.719749928 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.719773054 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.722019911 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.722081900 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.722136974 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.722254038 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.722280025 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.723018885 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.723046064 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.723110914 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.723227024 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.723252058 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.730501890 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.730588913 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.730621099 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.730747938 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.730747938 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.730747938 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.730747938 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.732733011 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.732793093 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.732857943 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.732979059 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.733012915 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.754765034 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.754905939 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.754968882 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.755037069 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.755037069 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.755062103 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.755083084 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.756930113 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.756969929 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:06.757030010 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.757173061 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:06.757200956 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.032428026 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.032428026 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.032495022 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.032533884 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.211700916 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.212347031 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.212404966 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.212666988 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.212718964 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.239356041 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.239672899 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.239753962 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.239934921 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.239949942 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.243489027 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.244072914 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.244131088 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.244323969 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.244337082 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.248832941 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.249174118 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.249253988 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.249372959 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.249394894 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.277575016 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.277909040 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.277966976 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.278186083 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.278203011 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.305887938 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.305948973 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.306055069 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.306126118 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.306126118 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.306212902 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.306212902 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.306255102 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.306293011 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.308327913 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.308372021 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.308567047 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.308568001 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.308648109 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.335520029 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.335591078 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.335681915 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.335767031 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.335767031 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.335810900 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.335844994 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.337829113 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.337882996 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.338016987 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.338139057 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.338159084 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.338716984 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.339660883 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.339844942 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.339844942 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.339844942 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.341428995 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.341511965 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.341608047 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.341730118 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.341748953 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.361532927 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.361588955 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.361747026 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.361747980 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.361747980 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.363405943 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.363495111 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.363589048 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.363692999 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.363711119 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.371572971 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.371737003 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.371804953 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.371853113 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.371854067 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.371877909 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.371901989 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.373532057 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.373611927 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.373694897 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.373804092 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.373825073 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.641782045 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.641848087 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.672930956 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.672962904 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.832564116 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.832962990 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.832993984 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.833334923 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.833342075 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.857255936 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.857733011 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.857777119 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.857953072 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.857964993 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.863918066 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.864156961 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.864216089 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.864420891 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.864434958 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.894520998 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.894818068 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.894853115 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.895121098 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.895127058 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.901535988 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.901777029 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.901796103 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.902044058 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.902056932 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.930497885 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.930732012 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.930918932 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.931003094 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.931003094 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.931046009 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.931076050 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.933199883 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.933260918 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.933346987 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.933476925 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.933489084 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.956533909 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.956576109 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.956624985 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.956809998 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.956809998 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.956809998 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.958576918 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.958620071 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.958688021 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.958822966 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.958837986 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.966799021 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.967092991 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.967165947 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.967165947 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.967214108 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.967242002 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.968818903 CEST	49945	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.968883038 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.968956947 CEST	49945	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.969091892 CEST	49945	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.969125986 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.992155075 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.992185116 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.992221117 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.992274046 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.992384911 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.992448092 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.992448092 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.992460966 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.992470980 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.994251013 CEST	49946	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.994266033 CEST	443	49946	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.994350910 CEST	49946	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.994462967 CEST	49946	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.994477034 CEST	443	49946	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.996002913 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.996057987 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.996185064 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.996218920 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.996218920 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.996236086 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.996256113 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.997946024 CEST	49947	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.998018980 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:07.998091936 CEST	49947	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.998189926 CEST	49947	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:07.998213053 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.266815901 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.266861916 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.462614059 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.466909885 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.466953039 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.467235088 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.467241049 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.475501060 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.476188898 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.476248980 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.476311922 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.476325989 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.492594004 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.492852926 CEST	49945	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.492913961 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.493093014 CEST	49945	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.493108034 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.513323069 CEST	443	49946	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.513561964 CEST	49946	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.513618946 CEST	443	49946	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.513820887 CEST	49946	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.513834953 CEST	443	49946	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.521313906 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.521528006 CEST	49947	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.521588087 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.521781921 CEST	49947	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.521795988 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.559097052 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.559245110 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.559381008 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.559405088 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.559506893 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.559568882 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.559592009 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.559617996 CEST	49943	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.559624910 CEST	443	49943	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.561935902 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.561984062 CEST	443	49948	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.562163115 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.562218904 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.562233925 CEST	443	49948	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.572007895 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.572081089 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.572140932 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.572493076 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.572493076 CEST	49944	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.572540998 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.572577000 CEST	443	49944	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.574146032 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.574174881 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.574239969 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.574374914 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.574378967 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.589247942 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.589325905 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.589380026 CEST	49945	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.589446068 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.589484930 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.589526892 CEST	49945	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.589572906 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.589606047 CEST	49945	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.589606047 CEST	49945	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.589624882 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.589644909 CEST	443	49945	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.591344118 CEST	49950	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.591382980 CEST	443	49950	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.591466904 CEST	49950	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.591572046 CEST	49950	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.591582060 CEST	443	49950	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.633116961 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.633169889 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.633239985 CEST	49947	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.633301020 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.633351088 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.633397102 CEST	49947	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.633441925 CEST	49947	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.633443117 CEST	49947	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.633471966 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.633497000 CEST	443	49947	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.633624077 CEST	443	49946	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.633701086 CEST	443	49946	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.633750916 CEST	49946	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.633904934 CEST	49946	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.633924961 CEST	443	49946	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.633939028 CEST	49946	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.633945942 CEST	443	49946	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.635627031 CEST	49951	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.635637999 CEST	443	49951	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.635690928 CEST	49951	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.635813951 CEST	49951	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.635828018 CEST	443	49951	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.635900021 CEST	49952	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.635978937 CEST	443	49952	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:08.636045933 CEST	49952	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.636146069 CEST	49952	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:08.636169910 CEST	443	49952	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.083518028 CEST	443	49948	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.084091902 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.084121943 CEST	443	49948	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.084367037 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.084394932 CEST	443	49948	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.093751907 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.093986034 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.094002008 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.094351053 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.094355106 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.120790958 CEST	443	49950	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.121164083 CEST	49950	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.121180058 CEST	443	49950	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.121522903 CEST	49950	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.121530056 CEST	443	49950	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.153595924 CEST	443	49951	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.153992891 CEST	49951	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.154011011 CEST	443	49951	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.154215097 CEST	49951	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.154220104 CEST	443	49951	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.155355930 CEST	443	49952	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.155570984 CEST	49952	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.155628920 CEST	443	49952	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.156259060 CEST	49952	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.156271935 CEST	443	49952	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.178670883 CEST	443	49948	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.178725958 CEST	443	49948	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.178879023 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.178893089 CEST	443	49948	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.178926945 CEST	443	49948	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.179078102 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.179078102 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.179078102 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.181154013 CEST	49953	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.181211948 CEST	443	49953	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.181291103 CEST	49953	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.181387901 CEST	49953	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.181402922 CEST	443	49953	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.190093040 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.190368891 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.190407991 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.190418005 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.190428972 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.190463066 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.190490961 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.190501928 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.190522909 CEST	49949	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.190526962 CEST	443	49949	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.191993952 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.192023993 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.192099094 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.192207098 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.192220926 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.218856096 CEST	443	49950	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.219254017 CEST	443	49950	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.219319105 CEST	49950	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.219468117 CEST	49950	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.219468117 CEST	49950	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.219486952 CEST	443	49950	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.219499111 CEST	443	49950	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.220925093 CEST	49955	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.220966101 CEST	443	49955	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.221040964 CEST	49955	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.221148014 CEST	49955	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.221163988 CEST	443	49955	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.247512102 CEST	443	49951	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.247586966 CEST	443	49951	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.247643948 CEST	443	49951	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.247729063 CEST	49951	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.247729063 CEST	49951	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.247781038 CEST	49951	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.247786045 CEST	443	49951	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.247793913 CEST	49951	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.247797966 CEST	443	49951	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.249865055 CEST	49956	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.249947071 CEST	443	49956	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.250063896 CEST	49956	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.250195980 CEST	49956	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.250227928 CEST	443	49956	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.325258970 CEST	443	49952	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.325305939 CEST	443	49952	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.325566053 CEST	49952	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.326386929 CEST	49952	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.326386929 CEST	49952	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.326451063 CEST	443	49952	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.326486111 CEST	443	49952	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.327089071 CEST	49957	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.327132940 CEST	443	49957	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.327198982 CEST	49957	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.327286959 CEST	49957	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.327295065 CEST	443	49957	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.391980886 CEST	49948	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.392041922 CEST	443	49948	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.733473063 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.734066010 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.734148979 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.734441042 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.734494925 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.736516953 CEST	443	49953	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.737076998 CEST	49953	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.737133026 CEST	443	49953	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.737206936 CEST	49953	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.737221956 CEST	443	49953	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.747668982 CEST	443	49955	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.748017073 CEST	49955	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.748045921 CEST	443	49955	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.748303890 CEST	49955	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.748328924 CEST	443	49955	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.767954111 CEST	443	49956	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.768250942 CEST	49956	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.768310070 CEST	443	49956	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.768652916 CEST	49956	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.768704891 CEST	443	49956	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.828727007 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.828790903 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.828860044 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.828998089 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.829041958 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.829071045 CEST	49954	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.829087973 CEST	443	49954	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.831079960 CEST	49958	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.831161022 CEST	443	49958	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.831248999 CEST	49958	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.831346989 CEST	49958	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.831365108 CEST	443	49958	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.841914892 CEST	443	49955	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.841983080 CEST	443	49955	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.842058897 CEST	49955	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.842083931 CEST	443	49955	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.842333078 CEST	49955	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.842334032 CEST	49955	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.842334032 CEST	49955	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.848455906 CEST	49959	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.848546982 CEST	443	49959	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.848639965 CEST	49959	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.848740101 CEST	49959	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.848759890 CEST	443	49959	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.851898909 CEST	443	49957	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.852240086 CEST	49957	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.852277994 CEST	443	49957	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.852595091 CEST	49957	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.852607012 CEST	443	49957	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.863132954 CEST	443	49956	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.863223076 CEST	443	49956	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.863431931 CEST	49956	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.863431931 CEST	49956	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.865032911 CEST	49960	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.865056992 CEST	49956	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.865115881 CEST	443	49956	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.865117073 CEST	443	49960	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.865221977 CEST	49960	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.865336895 CEST	49960	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.865358114 CEST	443	49960	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.867031097 CEST	443	49953	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.867470980 CEST	443	49953	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.867542028 CEST	443	49953	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.867705107 CEST	49953	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.867706060 CEST	49953	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.867706060 CEST	49953	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.867706060 CEST	49953	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.869039059 CEST	49961	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.869123936 CEST	443	49961	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.869203091 CEST	49961	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.869307041 CEST	49961	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.869324923 CEST	443	49961	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.946533918 CEST	443	49957	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.946569920 CEST	443	49957	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.946609974 CEST	443	49957	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.946707010 CEST	49957	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.946707010 CEST	49957	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.946753979 CEST	49957	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.946765900 CEST	443	49957	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.946794987 CEST	49957	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.946799994 CEST	443	49957	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.948374987 CEST	49962	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.948415041 CEST	443	49962	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:09.948486090 CEST	49962	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.948591948 CEST	49962	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:09.948600054 CEST	443	49962	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.157552004 CEST	49955	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.157613039 CEST	443	49955	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.173129082 CEST	49953	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.173187971 CEST	443	49953	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.350769043 CEST	443	49958	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.351267099 CEST	49958	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.351351976 CEST	443	49958	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.351717949 CEST	49958	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.351769924 CEST	443	49958	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.372092962 CEST	443	49959	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.372494936 CEST	49959	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.372555971 CEST	443	49959	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.372688055 CEST	49959	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.372704029 CEST	443	49959	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.382836103 CEST	443	49960	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.383162975 CEST	49960	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.383223057 CEST	443	49960	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.383306980 CEST	49960	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.383323908 CEST	443	49960	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.385166883 CEST	443	49961	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.385364056 CEST	49961	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.385422945 CEST	443	49961	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.385579109 CEST	49961	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.385593891 CEST	443	49961	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.445544004 CEST	443	49958	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.445620060 CEST	443	49958	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.445709944 CEST	49958	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.445996046 CEST	49958	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.445997000 CEST	49958	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.446063995 CEST	443	49958	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.446103096 CEST	443	49958	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.448581934 CEST	49964	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.448622942 CEST	443	49964	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.448961020 CEST	49964	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.448961020 CEST	49964	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.449023962 CEST	443	49964	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.469407082 CEST	443	49962	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.469856024 CEST	49962	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.469937086 CEST	443	49962	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.470074892 CEST	49962	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.470088959 CEST	443	49962	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.478490114 CEST	443	49960	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.478542089 CEST	443	49960	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.478598118 CEST	443	49960	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.478734016 CEST	49960	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.478734970 CEST	49960	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.478734970 CEST	49960	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.479223013 CEST	49960	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.479281902 CEST	443	49960	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.480317116 CEST	49965	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.480344057 CEST	443	49965	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.480402946 CEST	49965	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.480489969 CEST	49965	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.480494976 CEST	443	49965	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.482507944 CEST	443	49959	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.482664108 CEST	443	49959	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.482722044 CEST	49959	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.482764006 CEST	49959	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.482764006 CEST	49959	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.482784033 CEST	443	49959	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.482796907 CEST	443	49959	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.482989073 CEST	443	49961	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.483083010 CEST	443	49961	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.483136892 CEST	49961	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.483215094 CEST	49961	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.483215094 CEST	49961	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.483257055 CEST	443	49961	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.483289003 CEST	443	49961	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.484415054 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.484440088 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.484565020 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.484571934 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.484616041 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.484616041 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.484622002 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.484667063 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.484743118 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.484745979 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.568939924 CEST	443	49962	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.569248915 CEST	443	49962	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.569339991 CEST	49962	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.569426060 CEST	49962	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.569427013 CEST	49962	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.569467068 CEST	443	49962	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.569498062 CEST	443	49962	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.571513891 CEST	49968	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.571599007 CEST	443	49968	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.571687937 CEST	49968	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.571810007 CEST	49968	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.571829081 CEST	443	49968	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.980174065 CEST	443	49964	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.980775118 CEST	49964	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.980818033 CEST	443	49964	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:10.981239080 CEST	49964	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:10.981266022 CEST	443	49964	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.004524946 CEST	443	49965	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.004900932 CEST	49965	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.004926920 CEST	443	49965	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.005120039 CEST	49965	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.005126953 CEST	443	49965	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.015789032 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.016010046 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.016028881 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.016412020 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.016417980 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.018085003 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.018405914 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.018435955 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.018712044 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.018739939 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.075536013 CEST	443	49964	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.075570107 CEST	443	49964	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.075623035 CEST	443	49964	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.075774908 CEST	49964	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.075774908 CEST	49964	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.075822115 CEST	49964	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.075839996 CEST	443	49964	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.075876951 CEST	49964	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.075886011 CEST	443	49964	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.078267097 CEST	49969	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.078351974 CEST	443	49969	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.078468084 CEST	49969	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.078571081 CEST	49969	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.078594923 CEST	443	49969	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.094419956 CEST	443	49968	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.094775915 CEST	49968	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.094855070 CEST	443	49968	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.095304012 CEST	49968	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.095340967 CEST	443	49968	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.102173090 CEST	443	49965	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.102340937 CEST	443	49965	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.102394104 CEST	49965	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.102427959 CEST	49965	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.102427959 CEST	49965	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.102442980 CEST	443	49965	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.102449894 CEST	443	49965	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.104866982 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.104923964 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.105003119 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.105123043 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.105134964 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.117667913 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.117739916 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.117788076 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.117845058 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.117857933 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.117863894 CEST	49967	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.117866993 CEST	443	49967	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.118035078 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.118480921 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.118521929 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.118638039 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.118638039 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.118638039 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.118638039 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.119891882 CEST	49971	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.119973898 CEST	443	49971	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.120080948 CEST	49971	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.120163918 CEST	49971	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.120187998 CEST	443	49971	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.120735884 CEST	49972	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.120754957 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.120801926 CEST	49972	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.120871067 CEST	49972	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.120876074 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.196125984 CEST	443	49968	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.196827888 CEST	443	49968	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.196897984 CEST	49968	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.196976900 CEST	49968	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.196976900 CEST	49968	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.197017908 CEST	443	49968	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.197046041 CEST	443	49968	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.199182987 CEST	49973	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.199223042 CEST	443	49973	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.199347973 CEST	49973	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.199450016 CEST	49973	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.199459076 CEST	443	49973	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.345010996 CEST	49966	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.345041037 CEST	443	49966	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.599435091 CEST	443	49969	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.600126982 CEST	49969	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.600186110 CEST	443	49969	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.600677967 CEST	49969	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.600732088 CEST	443	49969	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.642206907 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.642656088 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.642688036 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.643130064 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.643146038 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.643974066 CEST	443	49971	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.644526005 CEST	49971	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.644587994 CEST	443	49971	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.644902945 CEST	49971	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.644956112 CEST	443	49971	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.649724007 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.650162935 CEST	49972	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.650177956 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.650557041 CEST	49972	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.650562048 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.695646048 CEST	443	49969	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.695672989 CEST	443	49969	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.695719957 CEST	443	49969	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.695851088 CEST	49969	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.695852041 CEST	49969	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.695947886 CEST	49969	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.695947886 CEST	49969	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.695987940 CEST	443	49969	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.696018934 CEST	443	49969	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.698545933 CEST	49974	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.698575020 CEST	443	49974	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.698625088 CEST	49974	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.698713064 CEST	49974	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.698717117 CEST	443	49974	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.737884998 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.738970041 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.739031076 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.739108086 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.739108086 CEST	49970	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.739145041 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.739168882 CEST	443	49970	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.739980936 CEST	443	49973	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.740314007 CEST	49973	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.740339041 CEST	443	49973	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.740822077 CEST	49973	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.740828037 CEST	443	49973	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.741704941 CEST	49975	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.741728067 CEST	443	49975	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.741792917 CEST	49975	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.741915941 CEST	49975	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.741924047 CEST	443	49975	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.742413998 CEST	443	49971	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.742480993 CEST	443	49971	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.742539883 CEST	49971	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.742633104 CEST	49971	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.742634058 CEST	49971	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.742675066 CEST	443	49971	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.742702961 CEST	443	49971	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.745114088 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.745220900 CEST	49976	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.745302916 CEST	443	49976	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.745377064 CEST	49976	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.745505095 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.745547056 CEST	49972	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.745554924 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.745568037 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.745616913 CEST	49972	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.745651007 CEST	49976	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.745657921 CEST	49972	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.745657921 CEST	49972	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.745666981 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.745688915 CEST	443	49972	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.745727062 CEST	443	49976	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.747770071 CEST	49977	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.747852087 CEST	443	49977	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.747936010 CEST	49977	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.748027086 CEST	49977	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.748060942 CEST	443	49977	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.841074944 CEST	443	49973	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.841224909 CEST	443	49973	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.841293097 CEST	49973	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.841387033 CEST	49973	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.841402054 CEST	443	49973	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.841417074 CEST	49973	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.841423988 CEST	443	49973	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.845045090 CEST	49978	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.845125914 CEST	443	49978	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:11.845217943 CEST	49978	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.845403910 CEST	49978	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:11.845426083 CEST	443	49978	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.231477976 CEST	443	49974	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.231890917 CEST	49974	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.231925964 CEST	443	49974	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.232290983 CEST	49974	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.232296944 CEST	443	49974	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.263055086 CEST	443	49975	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.263509989 CEST	49975	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.263525963 CEST	443	49975	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.264112949 CEST	49975	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.264120102 CEST	443	49975	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.272464991 CEST	443	49976	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.272546053 CEST	443	49977	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.272917032 CEST	49976	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.272974968 CEST	443	49976	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.273071051 CEST	49977	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.273154974 CEST	443	49977	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.273266077 CEST	49976	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.273318052 CEST	443	49976	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.273633957 CEST	49977	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.273688078 CEST	443	49977	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.334738016 CEST	443	49974	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.334779024 CEST	443	49974	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.334830046 CEST	443	49974	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.334832907 CEST	49974	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.334877968 CEST	49974	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.335011959 CEST	49974	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.335037947 CEST	443	49974	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.335046053 CEST	49974	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.335052013 CEST	443	49974	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.337901115 CEST	49979	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.337986946 CEST	443	49979	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.338089943 CEST	49979	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.338206053 CEST	49979	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.338226080 CEST	443	49979	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.358023882 CEST	443	49975	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.358103991 CEST	443	49975	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.358294964 CEST	49975	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.358294964 CEST	49975	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.358294964 CEST	49975	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.360631943 CEST	49980	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.360721111 CEST	443	49980	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.360811949 CEST	49980	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.360928059 CEST	49980	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.360949039 CEST	443	49980	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.367525101 CEST	443	49977	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.367578983 CEST	443	49976	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.367665052 CEST	443	49976	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.367805958 CEST	443	49977	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.367837906 CEST	49976	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.367839098 CEST	49976	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.367924929 CEST	49976	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.367925882 CEST	49977	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.367963076 CEST	443	49976	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.368000031 CEST	49977	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.368000031 CEST	49977	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.368042946 CEST	443	49977	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.368072987 CEST	443	49977	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.368632078 CEST	443	49978	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.369234085 CEST	49978	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.369276047 CEST	443	49978	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.369769096 CEST	49978	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.369780064 CEST	443	49978	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.370434999 CEST	49981	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.370515108 CEST	443	49981	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.370536089 CEST	49982	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.370559931 CEST	443	49982	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.370598078 CEST	49981	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.370616913 CEST	49982	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.370726109 CEST	49982	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.370738029 CEST	443	49982	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.370793104 CEST	49981	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.370826006 CEST	443	49981	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.463066101 CEST	443	49978	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.463136911 CEST	443	49978	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.463252068 CEST	443	49978	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.463496923 CEST	49978	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.463496923 CEST	49978	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.463496923 CEST	49978	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.463498116 CEST	49978	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.465503931 CEST	49983	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.465585947 CEST	443	49983	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.465817928 CEST	49983	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.465818882 CEST	49983	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.465950012 CEST	443	49983	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.672909021 CEST	49975	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.672921896 CEST	443	49975	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.766810894 CEST	49978	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.766870022 CEST	443	49978	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.855366945 CEST	443	49979	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.855849981 CEST	49979	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.855887890 CEST	443	49979	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.856421947 CEST	49979	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.856427908 CEST	443	49979	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.895868063 CEST	443	49980	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.896236897 CEST	49980	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.896316051 CEST	443	49980	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.896752119 CEST	49980	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.896766901 CEST	443	49980	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.900469065 CEST	443	49981	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.900726080 CEST	49981	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.900785923 CEST	443	49981	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.901164055 CEST	49981	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.901177883 CEST	443	49981	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.905260086 CEST	443	49982	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.905505896 CEST	49982	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.905540943 CEST	443	49982	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.905951023 CEST	49982	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.905962944 CEST	443	49982	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.960103989 CEST	443	49979	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.960184097 CEST	443	49979	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.960336924 CEST	49979	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.960391045 CEST	49979	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.960391998 CEST	49979	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.960427046 CEST	443	49979	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.960455894 CEST	443	49979	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.963229895 CEST	49984	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.963278055 CEST	443	49984	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.963371038 CEST	49984	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.963637114 CEST	49984	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.963666916 CEST	443	49984	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.991744995 CEST	443	49983	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.992130041 CEST	49983	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.992193937 CEST	443	49983	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.992269039 CEST	443	49980	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.992655993 CEST	443	49980	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.992664099 CEST	49983	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.992683887 CEST	443	49983	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.992693901 CEST	443	49980	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.992737055 CEST	49980	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.992825031 CEST	49980	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.992825031 CEST	49980	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.992825031 CEST	49980	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.995076895 CEST	49985	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.995141029 CEST	443	49985	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.995219946 CEST	49985	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.995354891 CEST	49985	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.995373011 CEST	443	49985	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.999620914 CEST	443	49981	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.999653101 CEST	443	49982	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.999701977 CEST	443	49981	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.999723911 CEST	443	49982	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.999763966 CEST	49982	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.999785900 CEST	443	49982	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.999871969 CEST	49981	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.999871969 CEST	49981	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.999871969 CEST	49981	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:12.999974966 CEST	443	49982	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:12.999986887 CEST	49982	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.000008106 CEST	49982	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.000024080 CEST	443	49982	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.000041008 CEST	443	49982	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.000042915 CEST	49982	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.000055075 CEST	443	49982	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.002356052 CEST	49986	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.002384901 CEST	49987	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.002412081 CEST	443	49986	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.002414942 CEST	443	49987	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.002492905 CEST	49986	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.002497911 CEST	49987	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.002651930 CEST	49986	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.002655983 CEST	49987	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.002671003 CEST	443	49986	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.002674103 CEST	443	49987	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.114582062 CEST	443	49983	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.114765882 CEST	443	49983	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.114955902 CEST	49983	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.114957094 CEST	49983	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.114957094 CEST	49983	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.117105007 CEST	49988	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.117146969 CEST	443	49988	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.117221117 CEST	49988	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.117338896 CEST	49988	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.117347956 CEST	443	49988	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.297946930 CEST	49980	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.298013926 CEST	443	49980	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.313760996 CEST	49981	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.313821077 CEST	443	49981	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.423135042 CEST	49983	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.423194885 CEST	443	49983	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.489232063 CEST	443	49984	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.489784002 CEST	49984	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.489866018 CEST	443	49984	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.490365982 CEST	49984	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.490418911 CEST	443	49984	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.530107021 CEST	443	49985	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.530529976 CEST	49985	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.530590057 CEST	443	49985	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.530919075 CEST	49985	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.530935049 CEST	443	49985	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.541565895 CEST	443	49987	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.541868925 CEST	49987	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.541887999 CEST	443	49987	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.542361975 CEST	49987	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.542372942 CEST	443	49987	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.551449060 CEST	443	49986	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.551860094 CEST	49986	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.551918983 CEST	443	49986	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.552248955 CEST	49986	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.552299976 CEST	443	49986	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.584186077 CEST	443	49984	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.584871054 CEST	443	49984	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.585134029 CEST	49984	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.585134029 CEST	49984	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.585134029 CEST	49984	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.587447882 CEST	49989	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.587528944 CEST	443	49989	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.587631941 CEST	49989	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.587722063 CEST	49989	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.587743998 CEST	443	49989	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.638179064 CEST	443	49985	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.638216019 CEST	443	49985	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.638271093 CEST	49985	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.638509035 CEST	49985	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.638509035 CEST	49985	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.638554096 CEST	443	49985	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.638578892 CEST	443	49985	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.639661074 CEST	443	49987	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.639729023 CEST	443	49987	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.639779091 CEST	49987	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.639800072 CEST	443	49987	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.639832973 CEST	443	49987	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.639883995 CEST	49987	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.639883995 CEST	49987	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.639916897 CEST	49987	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.639928102 CEST	443	49987	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.642337084 CEST	49990	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.642376900 CEST	443	49990	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.642443895 CEST	49990	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.642481089 CEST	49991	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.642566919 CEST	443	49991	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.642606974 CEST	49990	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.642617941 CEST	443	49990	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.642643929 CEST	49991	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.642729044 CEST	49991	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.642752886 CEST	443	49991	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.649358988 CEST	443	49986	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.649533033 CEST	443	49986	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.649600029 CEST	49986	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.649669886 CEST	49986	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.649671078 CEST	49986	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.649710894 CEST	443	49986	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.649738073 CEST	443	49986	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.651933908 CEST	49992	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.651954889 CEST	443	49992	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.652018070 CEST	49992	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.652169943 CEST	49992	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.652175903 CEST	443	49992	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.661667109 CEST	443	49988	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.662002087 CEST	49988	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.662019968 CEST	443	49988	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.662542105 CEST	49988	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.662548065 CEST	443	49988	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.770040035 CEST	443	49988	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.770196915 CEST	443	49988	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.770268917 CEST	49988	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.770311117 CEST	49988	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.770311117 CEST	49988	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.770329952 CEST	443	49988	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.770344973 CEST	443	49988	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.772228956 CEST	49993	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.772255898 CEST	443	49993	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.772306919 CEST	49993	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.772404909 CEST	49993	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.772409916 CEST	443	49993	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:13.891681910 CEST	49984	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:13.891742945 CEST	443	49984	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.109743118 CEST	443	49989	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.110563040 CEST	49989	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.110620975 CEST	443	49989	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.111294031 CEST	49989	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.111346960 CEST	443	49989	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.164122105 CEST	443	49991	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.164635897 CEST	49991	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.164717913 CEST	443	49991	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.165136099 CEST	49991	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.165189028 CEST	443	49991	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.173782110 CEST	443	49992	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.174216032 CEST	49992	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.174236059 CEST	443	49992	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.174735069 CEST	49992	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.174752951 CEST	443	49992	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.205372095 CEST	443	49989	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.205437899 CEST	443	49989	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.205626011 CEST	49989	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.205626011 CEST	49989	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.205703974 CEST	49989	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.205739975 CEST	443	49989	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.208472967 CEST	49994	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.208501101 CEST	443	49994	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.208700895 CEST	49994	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.208736897 CEST	49994	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.208749056 CEST	443	49994	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.261159897 CEST	443	49991	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.261317968 CEST	443	49991	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.261521101 CEST	49991	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.261521101 CEST	49991	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.261521101 CEST	49991	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.263413906 CEST	49995	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.263444901 CEST	443	49995	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.263501883 CEST	49995	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.263592958 CEST	49995	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.263597012 CEST	443	49995	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.276948929 CEST	443	49992	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.277148008 CEST	443	49992	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.277302980 CEST	49992	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.277302980 CEST	49992	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.277302980 CEST	49992	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.279463053 CEST	49996	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.279544115 CEST	443	49996	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.279643059 CEST	49996	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.279931068 CEST	49996	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.280000925 CEST	443	49996	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.298491955 CEST	443	49993	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.298917055 CEST	49993	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.298926115 CEST	443	49993	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.299468040 CEST	49993	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.299473047 CEST	443	49993	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.369788885 CEST	443	49990	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.370397091 CEST	49990	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.370477915 CEST	443	49990	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.370980024 CEST	49990	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.371033907 CEST	443	49990	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.393116951 CEST	443	49993	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.393822908 CEST	443	49993	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.393877983 CEST	49993	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.393903017 CEST	49993	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.393917084 CEST	443	49993	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.393925905 CEST	49993	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.393929958 CEST	443	49993	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.396315098 CEST	49997	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.396408081 CEST	443	49997	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.396486998 CEST	49997	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.396595001 CEST	49997	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.396612883 CEST	443	49997	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.465707064 CEST	443	49990	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.465816021 CEST	443	49990	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.466038942 CEST	49990	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.466120958 CEST	49990	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.466121912 CEST	49990	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.466161966 CEST	443	49990	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.466192007 CEST	443	49990	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.468148947 CEST	49998	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.468230009 CEST	443	49998	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.468322039 CEST	49998	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.468401909 CEST	49998	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.468421936 CEST	443	49998	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.501312017 CEST	49992	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.501341105 CEST	443	49992	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.563786983 CEST	49991	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.563847065 CEST	443	49991	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.729334116 CEST	443	49994	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.729739904 CEST	49994	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.729768991 CEST	443	49994	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.730067015 CEST	49994	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.730072021 CEST	443	49994	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.789637089 CEST	443	49995	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.789977074 CEST	49995	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.789992094 CEST	443	49995	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.790334940 CEST	49995	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.790338993 CEST	443	49995	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.813611031 CEST	443	49996	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.813935041 CEST	49996	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.813966036 CEST	443	49996	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.814233065 CEST	49996	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.814239025 CEST	443	49996	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.824107885 CEST	443	49994	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.824140072 CEST	443	49994	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.824184895 CEST	443	49994	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.824187994 CEST	49994	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.824223995 CEST	49994	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.824383020 CEST	49994	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.824400902 CEST	443	49994	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.824417114 CEST	49994	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.824424982 CEST	443	49994	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.826680899 CEST	49999	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.826767921 CEST	443	49999	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.826942921 CEST	49999	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.827013016 CEST	49999	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.827033043 CEST	443	49999	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.884862900 CEST	443	49995	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.885181904 CEST	443	49995	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.885384083 CEST	49995	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.885384083 CEST	49995	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.885384083 CEST	49995	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.887042046 CEST	50000	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.887105942 CEST	443	50000	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.887176037 CEST	50000	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.887267113 CEST	50000	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.887284040 CEST	443	50000	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.910181046 CEST	443	49996	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.910219908 CEST	443	49996	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.910269976 CEST	443	49996	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.910403967 CEST	49996	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.910404921 CEST	49996	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.910490990 CEST	49996	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.910490990 CEST	49996	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.910531044 CEST	443	49996	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.910567999 CEST	443	49996	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.911987066 CEST	50001	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.912018061 CEST	443	50001	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.912087917 CEST	50001	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.912192106 CEST	50001	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.912208080 CEST	443	50001	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.917874098 CEST	443	49997	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.918127060 CEST	49997	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.918159962 CEST	443	49997	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.918411970 CEST	49997	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.918423891 CEST	443	49997	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.991077900 CEST	443	49998	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.991612911 CEST	49998	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.991681099 CEST	443	49998	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:14.991738081 CEST	49998	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:14.991751909 CEST	443	49998	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.015646935 CEST	443	49997	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.015794992 CEST	443	49997	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.015873909 CEST	49997	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.015957117 CEST	49997	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.015957117 CEST	49997	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.016001940 CEST	443	49997	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.016030073 CEST	443	49997	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.018184900 CEST	50002	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.018222094 CEST	443	50002	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.018395901 CEST	50002	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.018428087 CEST	50002	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.018435955 CEST	443	50002	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.086647034 CEST	443	49998	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.087342978 CEST	443	49998	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.087397099 CEST	443	49998	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.087605000 CEST	49998	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.087605000 CEST	49998	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.087605000 CEST	49998	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.089248896 CEST	50003	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.089277029 CEST	443	50003	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.089349985 CEST	50003	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.089354038 CEST	49998	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.089423895 CEST	443	49998	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.089459896 CEST	50003	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.089467049 CEST	443	50003	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.188543081 CEST	49995	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.188566923 CEST	443	49995	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.252243996 CEST	50004	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:53:15.252326965 CEST	443	50004	142.250.185.132	192.168.2.4
Oct 21, 2024 15:53:15.252496958 CEST	50004	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:53:15.252840042 CEST	50004	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:53:15.252899885 CEST	443	50004	142.250.185.132	192.168.2.4
Oct 21, 2024 15:53:15.342969894 CEST	443	49999	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.343394041 CEST	49999	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.343456030 CEST	443	49999	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.343820095 CEST	49999	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.343832970 CEST	443	49999	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.441207886 CEST	443	49999	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.441281080 CEST	443	49999	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.441483974 CEST	49999	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.441483974 CEST	49999	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.441483974 CEST	49999	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.442804098 CEST	443	50001	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.443181038 CEST	50001	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.443238974 CEST	443	50001	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.443558931 CEST	50001	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.443572998 CEST	443	50001	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.443994045 CEST	50005	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.444077015 CEST	443	50005	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.444168091 CEST	50005	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.444336891 CEST	50005	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.444372892 CEST	443	50005	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.536839962 CEST	443	50001	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.536999941 CEST	443	50001	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.537255049 CEST	50001	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.537256002 CEST	50001	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.537256002 CEST	50001	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.538731098 CEST	50006	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.538815022 CEST	443	50006	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.538944006 CEST	50006	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.539041042 CEST	50006	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.539062023 CEST	443	50006	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.543920994 CEST	443	50002	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.544166088 CEST	50002	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.544197083 CEST	443	50002	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.544450998 CEST	50002	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.544457912 CEST	443	50002	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.610704899 CEST	443	50003	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.611013889 CEST	50003	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.611032963 CEST	443	50003	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.611376047 CEST	50003	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.611383915 CEST	443	50003	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.641835928 CEST	443	50002	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.641915083 CEST	443	50002	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.642018080 CEST	443	50002	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.642052889 CEST	50002	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.642070055 CEST	50002	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.642343044 CEST	50002	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.642360926 CEST	443	50002	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.642374992 CEST	50002	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.642381907 CEST	443	50002	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.645432949 CEST	50007	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.645473003 CEST	443	50007	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.645536900 CEST	50007	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.645699978 CEST	50007	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.645720959 CEST	443	50007	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.657294989 CEST	49999	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.657356977 CEST	443	49999	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.695462942 CEST	443	50000	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.695862055 CEST	50000	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.695877075 CEST	443	50000	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.696211100 CEST	50000	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.696217060 CEST	443	50000	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.720746040 CEST	443	50003	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.720818043 CEST	443	50003	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.720858097 CEST	50003	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.720917940 CEST	50003	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.720931053 CEST	443	50003	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.720943928 CEST	50003	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.720949888 CEST	443	50003	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.722920895 CEST	50008	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.723006964 CEST	443	50008	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.723093987 CEST	50008	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.723186970 CEST	50008	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.723206997 CEST	443	50008	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.804626942 CEST	443	50000	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.804792881 CEST	443	50000	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.804856062 CEST	50000	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.804897070 CEST	50000	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.804910898 CEST	443	50000	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.804919004 CEST	50000	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.804923058 CEST	443	50000	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.806564093 CEST	50009	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.806647062 CEST	443	50009	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.806736946 CEST	50009	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.806811094 CEST	50009	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.806830883 CEST	443	50009	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.845063925 CEST	50001	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.845093012 CEST	443	50001	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.854952097 CEST	443	50004	142.250.185.132	192.168.2.4
Oct 21, 2024 15:53:15.855298042 CEST	50004	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:53:15.855380058 CEST	443	50004	142.250.185.132	192.168.2.4
Oct 21, 2024 15:53:15.856775045 CEST	443	50004	142.250.185.132	192.168.2.4
Oct 21, 2024 15:53:15.857011080 CEST	50004	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:53:15.857430935 CEST	443	50004	142.250.185.132	192.168.2.4
Oct 21, 2024 15:53:15.907466888 CEST	50004	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:53:15.982276917 CEST	443	50005	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.982918978 CEST	50005	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.982959032 CEST	443	50005	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:15.983172894 CEST	50005	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:15.983198881 CEST	443	50005	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.064495087 CEST	443	50006	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.064872026 CEST	50006	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.064934015 CEST	443	50006	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.065169096 CEST	50006	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.065184116 CEST	443	50006	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.080446005 CEST	443	50005	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.080518007 CEST	443	50005	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.080784082 CEST	50005	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.080785036 CEST	50005	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.081383944 CEST	50005	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.081413984 CEST	443	50005	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.082881927 CEST	50010	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.082971096 CEST	443	50010	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.083053112 CEST	50010	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.083154917 CEST	50010	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.083173990 CEST	443	50010	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.161293983 CEST	443	50006	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.161345959 CEST	443	50006	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.161468983 CEST	443	50006	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.161504984 CEST	50006	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.161575079 CEST	50006	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.161575079 CEST	50006	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.161612988 CEST	50006	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.161649942 CEST	443	50006	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.163366079 CEST	50011	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.163446903 CEST	443	50011	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.163532019 CEST	50011	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.163672924 CEST	50011	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.163701057 CEST	443	50011	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.169364929 CEST	443	50007	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.169665098 CEST	50007	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.169694901 CEST	443	50007	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.169977903 CEST	50007	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.169986010 CEST	443	50007	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.245886087 CEST	443	50008	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.246445894 CEST	50008	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.246521950 CEST	443	50008	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.246720076 CEST	50008	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.246733904 CEST	443	50008	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.263113022 CEST	443	50007	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.263278008 CEST	443	50007	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.263528109 CEST	50007	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.263528109 CEST	50007	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.263528109 CEST	50007	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.264878035 CEST	50012	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.264959097 CEST	443	50012	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.265039921 CEST	50012	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.265129089 CEST	50012	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.265147924 CEST	443	50012	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.331238031 CEST	443	50009	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.331877947 CEST	50009	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.331943035 CEST	443	50009	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.331995964 CEST	50009	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.332010031 CEST	443	50009	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.343184948 CEST	443	50008	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.343214989 CEST	443	50008	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.343354940 CEST	50008	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.343389034 CEST	443	50008	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.343413115 CEST	443	50008	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.343462944 CEST	50008	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.343487978 CEST	50008	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.343503952 CEST	443	50008	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.343516111 CEST	50008	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.343523026 CEST	443	50008	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.345313072 CEST	50013	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.345396042 CEST	443	50013	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.345546007 CEST	50013	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.345618963 CEST	50013	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.345640898 CEST	443	50013	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.428493977 CEST	443	50009	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.428545952 CEST	443	50009	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.428673983 CEST	443	50009	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.428719044 CEST	50009	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.428787947 CEST	50009	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.428787947 CEST	50009	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.428787947 CEST	50009	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.430757999 CEST	50014	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.430838108 CEST	443	50014	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.430927038 CEST	50014	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.431044102 CEST	50014	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.431077003 CEST	443	50014	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.579392910 CEST	50007	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.579422951 CEST	443	50007	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.600008011 CEST	443	50010	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.600393057 CEST	50010	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.600452900 CEST	443	50010	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.600717068 CEST	50010	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.600729942 CEST	443	50010	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.693754911 CEST	443	50011	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.694144964 CEST	50011	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.694202900 CEST	443	50011	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.694514036 CEST	50011	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.694526911 CEST	443	50011	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.735558033 CEST	50009	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.735619068 CEST	443	50009	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.764662027 CEST	443	50010	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.764692068 CEST	443	50010	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.764770985 CEST	50010	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.764837027 CEST	443	50010	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.764985085 CEST	50010	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.764985085 CEST	50010	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.765028954 CEST	443	50010	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.765379906 CEST	443	50010	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.765415907 CEST	443	50010	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.765465021 CEST	50010	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.767049074 CEST	50015	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.767081976 CEST	443	50015	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.767134905 CEST	50015	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.767332077 CEST	50015	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.767339945 CEST	443	50015	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.788166046 CEST	443	50012	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.788577080 CEST	50012	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.788638115 CEST	443	50012	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.788790941 CEST	50012	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.788805962 CEST	443	50012	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.790389061 CEST	443	50011	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.790445089 CEST	443	50011	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.790561914 CEST	50011	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.790574074 CEST	443	50011	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.790628910 CEST	50011	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.790673018 CEST	50011	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.790673971 CEST	50011	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.790713072 CEST	443	50011	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.790744066 CEST	443	50011	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.792232990 CEST	50016	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.792260885 CEST	443	50016	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.792315960 CEST	50016	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.792398930 CEST	50016	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.792407036 CEST	443	50016	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.863773108 CEST	443	50013	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.864192963 CEST	50013	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.864233017 CEST	443	50013	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.864536047 CEST	50013	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.864562988 CEST	443	50013	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.885938883 CEST	443	50012	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.886678934 CEST	443	50012	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.886882067 CEST	50012	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.886965036 CEST	50012	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.886965036 CEST	50012	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.887006044 CEST	443	50012	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.887036085 CEST	443	50012	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.888402939 CEST	50017	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.888444901 CEST	443	50017	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.888514996 CEST	50017	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.888626099 CEST	50017	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.888634920 CEST	443	50017	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.953783035 CEST	443	50014	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.954566002 CEST	50014	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.954566956 CEST	50014	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.954627991 CEST	443	50014	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.954678059 CEST	443	50014	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.959008932 CEST	443	50013	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.959084034 CEST	443	50013	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.959254026 CEST	50013	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.959254980 CEST	50013	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.959254980 CEST	50013	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.960710049 CEST	50018	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.960730076 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:16.960791111 CEST	50018	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.960899115 CEST	50018	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:16.960903883 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.052568913 CEST	443	50014	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.052730083 CEST	443	50014	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.052912951 CEST	50014	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.052913904 CEST	50014	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.052913904 CEST	50014	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.054631948 CEST	50019	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.054672003 CEST	443	50019	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.054848909 CEST	50019	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.054848909 CEST	50019	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.054912090 CEST	443	50019	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.266849995 CEST	50013	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.266911983 CEST	443	50013	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.291150093 CEST	443	50015	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.291748047 CEST	50015	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.291827917 CEST	443	50015	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.292068005 CEST	50015	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.292120934 CEST	443	50015	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.318017006 CEST	443	50016	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.318547010 CEST	50016	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.318561077 CEST	443	50016	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.318799973 CEST	50016	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.318805933 CEST	443	50016	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.360609055 CEST	50014	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.360668898 CEST	443	50014	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.387402058 CEST	443	50015	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.387562037 CEST	443	50015	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.387891054 CEST	50015	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.387891054 CEST	50015	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.387892008 CEST	50015	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.389388084 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.389477015 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.389561892 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.389647961 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.389667034 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.411768913 CEST	443	50016	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.411822081 CEST	443	50016	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.411876917 CEST	50016	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.411886930 CEST	443	50016	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.411947012 CEST	443	50016	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.412028074 CEST	50016	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.412028074 CEST	50016	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.412050009 CEST	50016	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.412050009 CEST	50016	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.412060976 CEST	443	50016	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.412067890 CEST	443	50016	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.412570953 CEST	443	50017	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.412846088 CEST	50017	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.412874937 CEST	443	50017	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.413160086 CEST	50017	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.413166046 CEST	443	50017	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.413851976 CEST	50021	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.413934946 CEST	443	50021	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.414015055 CEST	50021	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.414093971 CEST	50021	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.414113045 CEST	443	50021	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.477888107 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.478377104 CEST	50018	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.478395939 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.478663921 CEST	50018	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.478669882 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.509509087 CEST	443	50017	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.509576082 CEST	443	50017	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.509708881 CEST	443	50017	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.509716988 CEST	50017	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.509778976 CEST	50017	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.509821892 CEST	50017	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.509839058 CEST	443	50017	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.509876966 CEST	50017	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.509885073 CEST	443	50017	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.511524916 CEST	50022	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.511612892 CEST	443	50022	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.511743069 CEST	50022	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.511837959 CEST	50022	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.511856079 CEST	443	50022	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.581665993 CEST	443	50019	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.581990957 CEST	50019	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.582011938 CEST	443	50019	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.582314014 CEST	50019	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.582320929 CEST	443	50019	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.648097038 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.648130894 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.648152113 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.648195028 CEST	50018	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.648212910 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.648226976 CEST	50018	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.648248911 CEST	50018	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.656728983 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.656790018 CEST	50018	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.656791925 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.656831026 CEST	50018	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.656903028 CEST	50018	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.656913996 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.656922102 CEST	50018	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.656925917 CEST	443	50018	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.658900023 CEST	50023	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.658982038 CEST	443	50023	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.659065962 CEST	50023	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.659233093 CEST	50023	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.659251928 CEST	443	50023	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.678190947 CEST	443	50019	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.678241968 CEST	443	50019	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.678288937 CEST	50019	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.678304911 CEST	443	50019	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.678417921 CEST	50019	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.678417921 CEST	50019	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.678426981 CEST	443	50019	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.678479910 CEST	443	50019	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.678608894 CEST	443	50019	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.679975986 CEST	50024	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.680057049 CEST	443	50024	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.680129051 CEST	50024	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.680250883 CEST	50024	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.680269957 CEST	443	50024	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:17.688549042 CEST	50015	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:17.688571930 CEST	443	50015	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.938592911 CEST	443	50023	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.939126968 CEST	50023	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:18.939158916 CEST	443	50023	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.939389944 CEST	50023	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:18.939399958 CEST	443	50023	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.944262981 CEST	443	50022	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.944554090 CEST	50022	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:18.944617033 CEST	443	50022	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.944932938 CEST	50022	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:18.944935083 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.944955111 CEST	443	50022	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.945142984 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:18.945158005 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.945369005 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:18.945379972 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.945441008 CEST	443	50021	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.945513964 CEST	443	50024	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.945631981 CEST	50021	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:18.945661068 CEST	443	50021	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.945729971 CEST	50024	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:18.945787907 CEST	443	50024	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.945882082 CEST	50021	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:18.945892096 CEST	443	50021	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:18.946024895 CEST	50024	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:18.946038961 CEST	443	50024	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.036452055 CEST	443	50023	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.036545038 CEST	443	50023	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.036765099 CEST	50023	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.036765099 CEST	50023	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.036765099 CEST	50023	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.039119959 CEST	50025	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.039208889 CEST	443	50025	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.039405107 CEST	50025	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.039468050 CEST	50025	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.039486885 CEST	443	50025	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.039802074 CEST	443	50024	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.039879084 CEST	443	50021	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.039936066 CEST	443	50021	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.039964914 CEST	443	50024	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.040026903 CEST	50021	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.040050983 CEST	50024	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.040091038 CEST	443	50021	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.040127039 CEST	50024	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.040127039 CEST	50024	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.040131092 CEST	443	50021	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.040153027 CEST	50021	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.040169954 CEST	443	50024	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.040188074 CEST	50021	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.040188074 CEST	50021	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.040188074 CEST	50021	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.040196896 CEST	443	50024	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.040229082 CEST	443	50021	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.041804075 CEST	50026	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.041853905 CEST	443	50026	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.041871071 CEST	50027	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.041896105 CEST	443	50027	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.041990042 CEST	50026	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.041992903 CEST	50027	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.042073965 CEST	50027	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.042095900 CEST	443	50027	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.042109013 CEST	50026	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.042140007 CEST	443	50026	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.043102980 CEST	443	50022	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.043165922 CEST	443	50022	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.043217897 CEST	50022	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.043275118 CEST	443	50022	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.043353081 CEST	443	50022	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.043364048 CEST	50022	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.043411970 CEST	443	50022	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.043445110 CEST	50022	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.043445110 CEST	50022	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.043467045 CEST	443	50022	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.043489933 CEST	443	50022	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.045242071 CEST	50028	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.045327902 CEST	443	50028	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.045408964 CEST	50028	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.045541048 CEST	50028	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.045568943 CEST	443	50028	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.121371031 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.121445894 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.121494055 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.121541977 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.121571064 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.121608019 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.121624947 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.123248100 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.123353004 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.123353004 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.123384953 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.123414040 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.123433113 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.123450041 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.123509884 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.123528957 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.123528957 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.123579025 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.123580933 CEST	50020	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.123603106 CEST	443	50020	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.125525951 CEST	50029	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.125591040 CEST	443	50029	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.125683069 CEST	50029	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.125803947 CEST	50029	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.125823975 CEST	443	50029	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.345005035 CEST	50023	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.345005035 CEST	50021	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.345071077 CEST	443	50023	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.345163107 CEST	443	50021	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.555897951 CEST	443	50025	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.556514025 CEST	50025	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.556596994 CEST	443	50025	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.556668043 CEST	50025	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.556683064 CEST	443	50025	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.563472986 CEST	443	50028	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.563899994 CEST	50028	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.563958883 CEST	443	50028	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.564156055 CEST	50028	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.564171076 CEST	443	50028	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.564594984 CEST	443	50027	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.564848900 CEST	50027	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.564866066 CEST	443	50027	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.565126896 CEST	50027	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.565138102 CEST	443	50027	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.569307089 CEST	443	50026	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.569521904 CEST	50026	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.569549084 CEST	443	50026	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.569740057 CEST	50026	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.569752932 CEST	443	50026	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.651736975 CEST	443	50025	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.651782036 CEST	443	50025	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.652127028 CEST	50025	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.652127028 CEST	50025	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.652127028 CEST	50025	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.654337883 CEST	50030	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.654418945 CEST	443	50030	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.654522896 CEST	50030	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.654639006 CEST	50030	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.654656887 CEST	443	50030	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.658607006 CEST	443	50027	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.658622026 CEST	443	50028	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.658684969 CEST	443	50027	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.658799887 CEST	50027	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.658860922 CEST	443	50027	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.658874989 CEST	443	50028	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.658899069 CEST	443	50027	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.658965111 CEST	50027	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.659060001 CEST	50028	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.659064054 CEST	50027	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.659064054 CEST	50027	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.659060001 CEST	50028	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.659060001 CEST	50028	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.659097910 CEST	443	50027	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.659122944 CEST	443	50027	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.660630941 CEST	50031	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.660712004 CEST	443	50031	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.660798073 CEST	50031	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.660900116 CEST	50031	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.660923004 CEST	443	50031	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.662961006 CEST	443	50026	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.663193941 CEST	443	50026	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.663283110 CEST	50026	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.663283110 CEST	50026	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.663284063 CEST	50026	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.954421043 CEST	50025	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.954480886 CEST	443	50025	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.969933033 CEST	50028	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.969994068 CEST	443	50028	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:19.970024109 CEST	50026	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:19.970088005 CEST	443	50026	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.171852112 CEST	443	50030	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.172266960 CEST	50030	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.172343969 CEST	443	50030	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.172673941 CEST	50030	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.172688007 CEST	443	50030	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.184736967 CEST	443	50031	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.185096025 CEST	50031	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.185153961 CEST	443	50031	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.185511112 CEST	50031	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.185563087 CEST	443	50031	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.267904043 CEST	443	50030	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.267951012 CEST	443	50030	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.268093109 CEST	50030	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.268167019 CEST	50030	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.268167973 CEST	50030	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.268208981 CEST	443	50030	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.268239021 CEST	443	50030	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.281021118 CEST	443	50031	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.281172991 CEST	443	50031	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.281352997 CEST	50031	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.281353951 CEST	50031	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.281353951 CEST	50031	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.595042944 CEST	50031	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.595102072 CEST	443	50031	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.674854994 CEST	443	50029	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.675374985 CEST	50029	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.675411940 CEST	443	50029	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.675710917 CEST	50029	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.675735950 CEST	443	50029	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.771629095 CEST	443	50029	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.771975994 CEST	443	50029	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.772049904 CEST	50029	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.772121906 CEST	50029	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.772123098 CEST	50029	443	192.168.2.4	13.107.246.45
Oct 21, 2024 15:53:20.772159100 CEST	443	50029	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:20.772183895 CEST	443	50029	13.107.246.45	192.168.2.4
Oct 21, 2024 15:53:25.862076998 CEST	443	50004	142.250.185.132	192.168.2.4
Oct 21, 2024 15:53:25.862231016 CEST	443	50004	142.250.185.132	192.168.2.4
Oct 21, 2024 15:53:25.862369061 CEST	50004	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:53:26.847316027 CEST	50004	443	192.168.2.4	142.250.185.132
Oct 21, 2024 15:53:26.847383022 CEST	443	50004	142.250.185.132	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 15:51:57.061969995 CEST	58363	53	192.168.2.4	1.1.1.1
Oct 21, 2024 15:52:05.799565077 CEST	138	138	192.168.2.4	192.168.2.255
Oct 21, 2024 15:52:10.648463011 CEST	57776	53	192.168.2.4	1.1.1.1
Oct 21, 2024 15:52:10.648600101 CEST	64773	53	192.168.2.4	1.1.1.1
Oct 21, 2024 15:52:10.654809952 CEST	53	56897	1.1.1.1	192.168.2.4
Oct 21, 2024 15:52:10.687742949 CEST	53	59523	1.1.1.1	192.168.2.4
Oct 21, 2024 15:52:10.761710882 CEST	53	64773	1.1.1.1	192.168.2.4
Oct 21, 2024 15:52:10.884504080 CEST	53	57776	1.1.1.1	192.168.2.4
Oct 21, 2024 15:52:11.566260099 CEST	53	55108	1.1.1.1	192.168.2.4
Oct 21, 2024 15:52:15.190798044 CEST	63545	53	192.168.2.4	1.1.1.1
Oct 21, 2024 15:52:15.191139936 CEST	53453	53	192.168.2.4	1.1.1.1
Oct 21, 2024 15:52:15.199568987 CEST	53	63545	1.1.1.1	192.168.2.4
Oct 21, 2024 15:52:15.199657917 CEST	53	53453	1.1.1.1	192.168.2.4
Oct 21, 2024 15:52:23.119452000 CEST	53	49423	1.1.1.1	192.168.2.4
Oct 21, 2024 15:52:28.533983946 CEST	53	64991	1.1.1.1	192.168.2.4
Oct 21, 2024 15:52:47.291548967 CEST	53	53346	1.1.1.1	192.168.2.4
Oct 21, 2024 15:53:09.931927919 CEST	53	54624	1.1.1.1	192.168.2.4
Oct 21, 2024 15:53:10.355356932 CEST	53	52330	1.1.1.1	192.168.2.4
Oct 21, 2024 15:53:39.199651957 CEST	53	61545	1.1.1.1	192.168.2.4
Oct 21, 2024 15:54:24.638058901 CEST	53	64210	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 21, 2024 15:51:57.061969995 CEST	192.168.2.4	1.1.1.1	0x5759	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Oct 21, 2024 15:52:10.648463011 CEST	192.168.2.4	1.1.1.1	0xd7f9	Standard query (0)	alanymm.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 15:52:10.648600101 CEST	192.168.2.4	1.1.1.1	0xae5b	Standard query (0)	alanymm.com	65	IN (0x0001)	false
Oct 21, 2024 15:52:15.190798044 CEST	192.168.2.4	1.1.1.1	0xca38	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 15:52:15.191139936 CEST	192.168.2.4	1.1.1.1	0xcd5	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 21, 2024 15:51:57.070293903 CEST	1.1.1.1	192.168.2.4	0x5759	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 15:51:57.693578959 CEST	1.1.1.1	192.168.2.4	0xec1b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 21, 2024 15:51:57.693578959 CEST	1.1.1.1	192.168.2.4	0xec1b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 21, 2024 15:52:10.884504080 CEST	1.1.1.1	192.168.2.4	0xd7f9	No error (0)	alanymm.com		78.135.79.21	A (IP address)	IN (0x0001)	false
Oct 21, 2024 15:52:15.199568987 CEST	1.1.1.1	192.168.2.4	0xca38	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 21, 2024 15:52:15.199657917 CEST	1.1.1.1	192.168.2.4	0xcd5	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

armmf.adobe.com

slscr.update.microsoft.com

alanymm.com

https:

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:51:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-21 13:51:51 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=10376 Date: Mon, 21 Oct 2024 13:51:50 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:51:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-21 13:51:52 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25994 Date: Mon, 21 Oct 2024 13:51:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-21 13:51:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	96.17.64.171	443	7236	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:51:57 UTC	475	OUT	GET /onboarding/smskillreader.txt HTTP/1.1 Host: armmf.adobe.com Connection: keep-alive Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br If-None-Match: "78-5faa31cce96da" If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
2024-10-21 13:51:58 UTC	198	IN	HTTP/1.1 304 Not Modified Content-Type: text/plain; charset=UTF-8 Last-Modified: Mon, 01 May 2023 15:02:33 GMT ETag: "78-5faa31cce96da" Date: Mon, 21 Oct 2024 13:51:58 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:00 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ypbtgUwEe4HlTtm&MD=fbEVfk9f HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-21 13:52:00 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: fe905123-00f4-4edd-8161-71792d73c403 MS-RequestId: 8cb417d5-a19c-4fde-8ae9-9b75cace11e6 MS-CV: 9/4CHshtZEGGjY6J.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 21 Oct 2024 13:51:59 GMT Connection: close Content-Length: 24490
2024-10-21 13:52:00 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-21 13:52:00 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49754	78.135.79.21	443	7828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:11 UTC	761	OUT	GET /m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.com HTTP/1.1 Host: alanymm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 13:52:12 UTC	191	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Mon, 21 Oct 2024 13:52:09 GMT Connection: close Content-Length: 1208
2024-10-21 13:52:12 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49753	78.135.79.21	443	7828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:12 UTC	685	OUT	GET /favicon.ico HTTP/1.1 Host: alanymm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 13:52:12 UTC	191	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Mon, 21 Oct 2024 13:52:10 GMT Connection: close Content-Length: 1208
2024-10-21 13:52:12 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49764	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:38 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ypbtgUwEe4HlTtm&MD=fbEVfk9f HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-21 13:52:38 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 8a7ec5ae-2682-4ff8-8f93-fe0acd5e0f07 MS-RequestId: 7066de26-5241-492a-a54c-cddbfce7468e MS-CV: l8Wq/HQd6UO/JW1j.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 21 Oct 2024 13:52:37 GMT Connection: close Content-Length: 30005
2024-10-21 13:52:38 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-21 13:52:38 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:42 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:42 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:42 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 19 Oct 2024 17:01:38 GMT ETag: "0x8DCF05FB2860982" x-ms-request-id: f1e6e80a-401e-0048-62b4-230409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135242Z-178ffc65759tbh4guw9nprg7en00000008a0000000005wfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:42 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-21 13:52:42 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-21 13:52:42 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-21 13:52:42 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-21 13:52:42 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-21 13:52:42 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-21 13:52:42 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-21 13:52:42 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-21 13:52:42 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-21 13:52:42 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:43 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:43 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:43 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: f31cec41-001e-00ad-0fb4-23554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135243Z-178ffc657596nmltszqv4dpv1800000008pg00000000ncsz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:43 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:43 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:43 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 236f0d98-b01e-0097-23b4-234f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135243Z-178ffc65759sqv7lrwy1666yds00000008ng000000000e28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:43 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:43 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:43 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:43 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: c8166578-701e-006f-41b4-23afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135243Z-178ffc65759tbh4guw9nprg7en00000008b0000000001xpw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:43 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:43 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:43 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: db9c49b1-b01e-00ab-61b4-23dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135243Z-178ffc657594cw7svg3yyru8b000000008mg00000000gqnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:43 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:43 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:43 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:43 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 215660da-601e-0001-80b4-23faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135243Z-178ffc65759b6phk1938t93stc00000008rg00000000e3gc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:43 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:44 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:44 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 79de2ff4-a01e-006f-75b4-2313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135244Z-178ffc65759b6phk1938t93stc00000008tg000000006sw7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:44 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:44 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f1cdf84c-c01e-00a2-7eb4-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135244Z-178ffc65759ltvfqk1p4048kt4000000086g00000000b0gu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:44 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:44 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 29ddfe47-801e-008c-25b4-237130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135244Z-178ffc65759b6phk1938t93stc00000008mg00000000sxt8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:44 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:44 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:44 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6ba7c2f1-c01e-0034-11b4-232af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135244Z-178ffc65759ckzrvkg6aww0ns400000008g0000000006zdn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:44 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:44 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:44 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 000b1e82-501e-007b-35b4-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135244Z-178ffc65759xcrzp9hg9mrxcqn00000008tg000000006r78 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:44 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:44 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:44 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 6bdfb643-501e-008f-2db4-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135244Z-178ffc65759ckzrvkg6aww0ns400000008e000000000ekry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:44 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:44 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:44 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 5af8866b-e01e-0051-2cb4-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135244Z-178ffc657594b2ghbgpuphudcn00000008k000000000aywt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:44 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:44 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: f1cdf905-c01e-00a2-28b4-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135244Z-178ffc65759s7gvj790ueq542n000000087g00000000e6ht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:44 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:44 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 79de3108-a01e-006f-6eb4-2313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135244Z-178ffc65759s2lrrn1hbsvp3a800000008eg00000000pm7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:44 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:44 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:44 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b898d821-901e-008f-62b4-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135244Z-178ffc65759h6zr9gshwvg1mgg00000008g000000000v941 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:44 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:45 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:45 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: b1c9fd68-401e-002a-03b4-23c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135245Z-178ffc65759phhh5prpzy708cn00000008g0000000004wug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:45 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:45 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:45 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 854ddba6-a01e-0032-41b4-231949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135245Z-178ffc65759tbh4guw9nprg7en00000008ag000000003ycm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:45 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:45 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: a228dca2-c01e-00a1-05b4-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135245Z-178ffc65759b6phk1938t93stc00000008v00000000006p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:45 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:45 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: d6f2135d-401e-0016-79b4-2353e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135245Z-178ffc65759ztcbhzhemfn92pw00000008r0000000003tvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:45 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:45 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:45 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: c94ff8e6-801e-0035-56b4-23752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135245Z-178ffc65759dpzf5dzapequ9n000000008cg00000000km5t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:45 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:45 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 9ca36d4f-401e-005b-42b4-239c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135245Z-178ffc657594b2ghbgpuphudcn00000008g000000000hhbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:45 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e27597ff-e01e-0099-0ab4-23da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135245Z-178ffc65759sqv7lrwy1666yds00000008h000000000e1nn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:46 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: f1e6eb1c-401e-0048-0fb4-230409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135246Z-178ffc65759ts6772vh1wvh4aw00000008pg000000008nfv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:46 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:46 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 770a8df0-f01e-0052-02b4-239224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135246Z-178ffc657596nmltszqv4dpv1800000008n000000000sfx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:46 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:46 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:46 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f0cc003f-001e-0034-04b4-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135246Z-178ffc65759ts6772vh1wvh4aw00000008k000000000mz4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:46 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:46 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:46 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: bc2a09c4-201e-006e-76b4-23bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135246Z-178ffc65759sqv7lrwy1666yds00000008ng000000000e9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:46 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:46 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7a5b0fd3-f01e-0020-5fb4-23956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135246Z-178ffc65759s2lrrn1hbsvp3a800000008fg00000000kkw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:46 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 98640d8a-f01e-005d-1cb4-2313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135246Z-178ffc65759b6phk1938t93stc00000008p000000000p3rf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:46 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:46 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: dee9d96e-601e-0084-11b4-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135246Z-178ffc65759b6phk1938t93stc00000008qg00000000gyes x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:46 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:47 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:47 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 2ab36301-901e-0067-19b4-23b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135247Z-178ffc65759ckzrvkg6aww0ns400000008e000000000em1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:47 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:47 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: f1e6ebb8-401e-0048-19b4-230409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135247Z-178ffc65759phhh5prpzy708cn00000008e000000000bm9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:47 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:47 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 6ba7c906-c01e-0034-56b4-232af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135247Z-178ffc65759b6phk1938t93stc00000008tg000000006t32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:47 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:47 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:47 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: bd647c25-701e-0053-6db4-233a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135247Z-178ffc65759cwlbzs47w327hrn00000008kg000000008mvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:47 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:47 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:47 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: aeb88203-401e-00ac-4ab4-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135247Z-178ffc657599t94pduaxa858ss000000081g00000000p9ne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:47 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:47 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:47 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 1a6aed53-301e-000c-5ab4-23323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135247Z-178ffc657594cw7svg3yyru8b000000008q0000000007yw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:48 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:48 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:48 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 6bdfb929-501e-008f-46b4-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135248Z-178ffc6575924dtrv3bg879fun00000008q000000000kg35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:48 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:48 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:48 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 8f03770d-001e-0049-22b4-235bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135248Z-178ffc65759xp2qhvg0ry65u8s00000008a000000000uh13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:48 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:48 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:48 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: f19a3559-001e-002b-05b4-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135248Z-178ffc6575927r9z02fuhf5m1800000008c00000000085te x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:48 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:48 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: f31cf33d-001e-00ad-7fb4-23554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135248Z-178ffc657596nmltszqv4dpv1800000008n000000000sg25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:48 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:48 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:48 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 66c24b8a-b01e-0001-29b4-2346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135248Z-178ffc65759ph9lb1wbddceht400000008bg00000000cyn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:48 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:48 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:48 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 29de0517-801e-008c-5cb4-237130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135248Z-178ffc657594b2ghbgpuphudcn00000008fg00000000k8d1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:48 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:48 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:48 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: c94ffd6c-801e-0035-65b4-23752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135248Z-178ffc657594cw7svg3yyru8b000000008m000000000hybh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:48 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:48 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:48 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 58e5d6ef-b01e-005c-47b4-234c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135248Z-178ffc65759wtchcan29e9304c000000083000000000qw31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:48 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:48 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:48 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 9ca3735a-401e-005b-7fb4-239c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135248Z-178ffc65759jpznb60zg85y41000000008e0000000002951 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:48 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:49 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:49 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 535f1e54-c01e-00ad-03b4-23a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135249Z-178ffc65759ztcbhzhemfn92pw00000008n000000000efyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:49 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:49 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:49 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 482a58b6-901e-005b-32b4-232005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135249Z-178ffc65759b6phk1938t93stc00000008ug00000000228d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:49 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:49 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:49 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: aeb8849b-401e-00ac-27b4-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135249Z-178ffc65759tbh4guw9nprg7en000000088g00000000c23e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:49 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:49 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 854de04b-a01e-0032-80b4-231949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135249Z-178ffc65759wc4jjbndw9ea59c00000008b000000000e05n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:49 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 4552ca04-c01e-0066-7ab4-23a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135249Z-178ffc65759jpznb60zg85y41000000008eg000000000dmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:50 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 163092c4-001e-0066-1bb4-23561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135250Z-178ffc65759jpznb60zg85y410000000088g00000000nzt6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:50 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: f248ac78-001e-0028-58b4-23c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135250Z-178ffc65759b6phk1938t93stc00000008ng00000000r2gb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:50 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:50 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 000b2b9f-501e-007b-25b4-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135250Z-178ffc65759jpznb60zg85y41000000008e00000000029ad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:50 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:50 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c3ec2866-701e-0098-46b4-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135250Z-178ffc65759dpzf5dzapequ9n000000008dg00000000g72x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:50 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:50 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: f31cf65d-001e-00ad-58b4-23554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135250Z-178ffc65759ph9lb1wbddceht400000008c000000000bb6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:50 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:50 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:50 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 16309373-001e-0066-35b4-23561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135250Z-178ffc65759s2lrrn1hbsvp3a800000008kg000000009bu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:50 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:50 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:50 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 79de3ac1-a01e-006f-78b4-2313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135250Z-178ffc657594b2ghbgpuphudcn00000008gg00000000f6xd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:50 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:50 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:50 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 49871e3f-e01e-0020-6cb4-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135250Z-178ffc657594cw7svg3yyru8b000000008g000000000th1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:50 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:50 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:50 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: b8358d3d-c01e-0046-21b4-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135250Z-178ffc65759ltvfqk1p4048kt4000000085000000000h43w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:50 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:50 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:50 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: fb314893-f01e-003f-5ab4-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135250Z-178ffc657594cw7svg3yyru8b000000008h000000000qm0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:50 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:51 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: cda2d0bd-301e-0000-37b4-23eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135251Z-178ffc657594cw7svg3yyru8b000000008gg00000000sf5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:51 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:51 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: fe7b5e5f-d01e-0017-6ab4-23b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135251Z-178ffc657596nmltszqv4dpv1800000008r000000000ghx4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:51 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:51 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:51 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 59e6e802-401e-0067-5bb4-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135251Z-178ffc65759h6zr9gshwvg1mgg00000008gg00000000sxt8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:51 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:51 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:51 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: f19a3aaf-001e-002b-71b4-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135251Z-178ffc657594cw7svg3yyru8b000000008hg00000000panv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:51 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:51 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:51 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 310198b1-601e-0070-38b4-23a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135251Z-178ffc65759cwlbzs47w327hrn00000008f000000000m3fa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:51 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:52 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:52 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 3a1912da-701e-001e-09b4-23f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135252Z-178ffc657599t94pduaxa858ss000000084000000000fc5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:52 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:52 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:52 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: e653993a-601e-0002-36b4-23a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135252Z-178ffc65759ts6772vh1wvh4aw00000008g000000000sttb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:52 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:52 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:52 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: f19a3ad5-001e-002b-14b4-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135252Z-178ffc65759ckzrvkg6aww0ns400000008d000000000h1cp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:52 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:52 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:52 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: c347e9f8-b01e-0070-6bb4-231cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135252Z-178ffc65759b6phk1938t93stc00000008r000000000fu8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:52 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:52 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 803e3648-601e-00ab-6cb4-2366f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135252Z-178ffc65759ckzrvkg6aww0ns400000008eg00000000dm3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:53 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:53 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e275a988-e01e-0099-26b4-23da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135253Z-178ffc65759wc4jjbndw9ea59c00000008ag00000000fyq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:53 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:53 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 0f326a50-e01e-000c-2db4-238e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135253Z-178ffc65759ltvfqk1p4048kt4000000081000000000vdvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:53 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 59d52e26-d01e-0049-70b4-23e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135253Z-178ffc65759ph9lb1wbddceht4000000089g00000000n1rt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:53 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: a1b5db8b-c01e-0079-05b4-23e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135253Z-178ffc65759cwlbzs47w327hrn00000008e000000000pn8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:53 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:53 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:53 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c6c3d3c0-c01e-0082-2eb4-23af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135253Z-178ffc65759xcrzp9hg9mrxcqn00000008t00000000080yd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:53 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:53 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:53 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:53 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0f047007-201e-0071-41b4-23ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135253Z-178ffc657594cw7svg3yyru8b000000008n000000000f3he x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:53 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:53 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:53 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: e6539d29-601e-0002-77b4-23a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135253Z-178ffc6575924dtrv3bg879fun00000008s000000000db10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:53 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:53 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:53 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: b1393859-401e-000a-7bb4-234a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135253Z-178ffc65759s2lrrn1hbsvp3a800000008mg0000000055rm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:53 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:53 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:53 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: bc5786a4-b01e-003e-63b4-238e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135253Z-178ffc6575927r9z02fuhf5m1800000008c0000000008650 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:53 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:54 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:54 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:54 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: fb9f51dd-301e-0099-16b4-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135254Z-178ffc65759ztcbhzhemfn92pw00000008k000000000n6zb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:54 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:54 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:54 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: f1ce04b6-c01e-00a2-61b4-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135254Z-178ffc65759tbh4guw9nprg7en000000085000000000qhxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:54 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:54 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:54 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:54 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c81683d1-701e-006f-38b4-23afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135254Z-178ffc657594cw7svg3yyru8b000000008k000000000ppsa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:54 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:54 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:54 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 818b954b-501e-0029-12b4-23d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135254Z-178ffc65759jpznb60zg85y41000000008d0000000006q5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:54 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:54 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:54 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 8779d52e-201e-0003-39b4-23f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135254Z-178ffc6575978rcg5hv897ev4n00000008b0000000002m5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:54 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:54 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:54 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: c6c3d5a0-c01e-0082-46b4-23af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135254Z-178ffc65759s2lrrn1hbsvp3a800000008mg0000000055tq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:54 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:54 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:54 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 437ca0e5-601e-000d-45b4-232618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135254Z-178ffc65759jpznb60zg85y41000000008cg000000008ucz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:55 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:55 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:55 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 000b3b31-501e-007b-5fb4-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135255Z-178ffc65759h6zr9gshwvg1mgg00000008kg00000000nhmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:55 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:55 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:55 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 4995ff40-101e-0017-45b4-2347c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135255Z-178ffc65759tbh4guw9nprg7en000000088g00000000c2nw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:55 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:55 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:55 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: ef68bbac-901e-0029-44b4-23274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135255Z-178ffc65759tbh4guw9nprg7en000000085000000000qhz9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:55 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:55 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:55 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: c5820f3d-001e-0065-1cb4-230b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135255Z-178ffc65759cwlbzs47w327hrn00000008g000000000h625 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:55 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:55 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:55 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: ef68bc68-901e-0029-70b4-23274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135255Z-178ffc65759ckzrvkg6aww0ns400000008h0000000002rnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:55 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:55 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:55 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 2d169e6c-001e-008d-64b4-23d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135255Z-178ffc6575978rcg5hv897ev4n000000086g00000000hnhu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:55 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:55 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:55 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b15ffded-501e-0016-09b4-23181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135255Z-178ffc65759ztcbhzhemfn92pw00000008k000000000n71p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:55 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:55 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:55 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: b4733d35-c01e-000b-0bb4-23e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135255Z-178ffc65759dsjc6k7qr9g0sr8000000086g000000007qg3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:55 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:56 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:56 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: bea584f5-201e-0000-3db4-23a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135256Z-178ffc65759wtchcan29e9304c000000084000000000nuu5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:57 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:56 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:57 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 41301898-b01e-003d-28b4-23d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135257Z-178ffc65759dsjc6k7qr9g0sr8000000087g000000003n6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:57 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:56 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:57 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 0f047598-201e-0071-4cb4-23ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135257Z-178ffc65759phhh5prpzy708cn00000008h0000000000xnq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:57 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:56 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:56 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: a8c4ce1b-001e-0082-5ab4-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135256Z-178ffc657594b2ghbgpuphudcn00000008eg00000000p2sg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:57 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:57 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:57 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 3fe96ae9-201e-00aa-7ab4-233928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135257Z-178ffc65759ckzrvkg6aww0ns400000008g00000000071cb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:57 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:57 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:57 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 58e5e5ae-b01e-005c-49b5-234c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135257Z-178ffc65759b6phk1938t93stc00000008tg000000006ttg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:57 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:57 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:57 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: b616654d-701e-0050-65b4-236767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135257Z-178ffc6575927r9z02fuhf5m18000000086g00000000rdcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:57 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:57 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:57 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 0f64c007-d01e-002b-53b4-2325fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135257Z-178ffc657594cw7svg3yyru8b000000008n000000000f3t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:57 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:57 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:57 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: e275bb16-e01e-0099-39b5-23da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135257Z-178ffc657594cw7svg3yyru8b000000008p000000000c10s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:58 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:58 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:58 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 98e5f6e8-701e-005c-4ab5-23bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135258Z-178ffc6575924dtrv3bg879fun00000008sg00000000a6mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:58 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:58 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:58 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 1a0939d2-b01e-0084-1fb5-23d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135258Z-178ffc6575927r9z02fuhf5m18000000088g00000000mtbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:58 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:58 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:58 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 7113b7f4-f01e-0096-5bb5-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135258Z-178ffc657596nmltszqv4dpv1800000008mg00000000urmv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:58 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:58 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:58 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c1437d3c-001e-0014-0db5-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135258Z-178ffc65759jpznb60zg85y41000000008cg000000008um2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:58 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:58 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:58 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 437ca768-601e-000d-47b5-232618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135258Z-178ffc6575924dtrv3bg879fun00000008v0000000000e4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:58 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:58 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:58 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 6bdfc773-501e-008f-19b5-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135258Z-178ffc6575927r9z02fuhf5m18000000088000000000pa36 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:58 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:58 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:58 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: bd649387-701e-0053-59b5-233a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135258Z-178ffc65759xcrzp9hg9mrxcqn00000008ug0000000024zk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:58 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:58 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:58 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 3101ac62-601e-0070-5db5-23a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135258Z-178ffc65759xp2qhvg0ry65u8s00000008hg0000000000c8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:58 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:59 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:59 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:59 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 3d6e7445-101e-008d-1eb5-2392e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135259Z-178ffc65759wc4jjbndw9ea59c00000008ag00000000fz0s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:52:59 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:59 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:59 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: b1ca06df-401e-002a-70b5-23c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135259Z-178ffc65759s7gvj790ueq542n000000086g00000000gx1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:59 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:59 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:59 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 36562410-201e-0051-0eb5-237340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135259Z-178ffc65759ztcbhzhemfn92pw00000008n000000000egbr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:59 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:59 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:59 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0aa3eb4f-c01e-002b-53b5-236e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135259Z-178ffc657594cw7svg3yyru8b000000008m000000000hyx3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:59 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:59 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:59 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 9f95b005-a01e-0021-53b5-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135259Z-178ffc65759xp2qhvg0ry65u8s00000008e000000000ehqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:59 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:59 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:59 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 3101ae65-601e-0070-4bb5-23a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135259Z-178ffc65759xp2qhvg0ry65u8s00000008f000000000arm2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:59 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:59 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:52:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:59 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 0f327305-e01e-000c-65b5-238e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135259Z-178ffc65759s2lrrn1hbsvp3a800000008m00000000079cy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:52:59 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:52:59 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:52:59 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 75b99015-201e-0085-71b5-2334e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135259Z-178ffc65759jpznb60zg85y41000000008e0000000002a1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:00 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:00 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:00 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 20faa6e5-d01e-005a-05b5-237fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135300Z-178ffc65759ph9lb1wbddceht400000008a000000000hzf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:53:00 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:00 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:00 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 3101afad-601e-0070-7db5-23a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135300Z-178ffc6575978rcg5hv897ev4n000000087g00000000en84 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:00 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:00 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:00 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: dccd5272-801e-0048-80b5-23f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135300Z-178ffc65759dsjc6k7qr9g0sr8000000086000000000a4qz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:53:00 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:00 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:00 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: dee9f009-601e-0084-2db5-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135300Z-178ffc65759s2lrrn1hbsvp3a800000008ng0000000016b8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:00 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:00 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:01 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 482a6b42-901e-005b-09b5-232005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135300Z-178ffc65759dpzf5dzapequ9n000000008hg000000000rs7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:01 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:00 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:00 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 5ca10d21-801e-00a3-55b5-237cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135300Z-178ffc65759b6phk1938t93stc00000008ng00000000r3gg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:53:00 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:00 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:00 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 75b9922b-201e-0085-66b5-2334e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135300Z-178ffc6575924dtrv3bg879fun00000008r000000000ffe0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:00 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:00 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:00 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 236f2b03-b01e-0097-02b5-234f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135300Z-178ffc65759ph9lb1wbddceht400000008d00000000073d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:00 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:01 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:01 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: a8c4d21e-001e-0082-0eb5-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135301Z-178ffc65759sqv7lrwy1666yds00000008n00000000029m0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:01 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:01 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:01 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 0f327508-e01e-000c-38b5-238e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135301Z-178ffc65759dsjc6k7qr9g0sr8000000085g00000000cfuz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:01 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:01 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:01 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: aec4c630-e01e-0085-26b5-23c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135301Z-178ffc65759wc4jjbndw9ea59c00000008d0000000006hk8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:01 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:01 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:01 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5f33ed9c-301e-0020-39b5-236299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135301Z-178ffc65759dsjc6k7qr9g0sr8000000085000000000dxug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:53:01 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:01 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:01 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: ea3b64e6-901e-0083-1eb5-23bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135301Z-178ffc657596nmltszqv4dpv1800000008v0000000000apg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:01 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:01 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:01 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 11f68172-f01e-0003-1fb5-234453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135301Z-178ffc65759cwlbzs47w327hrn00000008hg00000000c57y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:53:01 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:01 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:01 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 59d5493c-d01e-0049-2eb5-23e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135301Z-178ffc65759ph9lb1wbddceht400000008d00000000073fm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:02 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:01 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:02 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: b835986e-c01e-0046-03b5-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135302Z-178ffc65759xcrzp9hg9mrxcqn00000008mg00000000sqmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:02 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:02 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:02 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:02 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: aeb89962-401e-00ac-7bb5-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135302Z-178ffc65759sqv7lrwy1666yds00000008gg00000000fu16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:53:02 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:02 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:02 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 16309b5a-001e-0066-38b5-23561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135302Z-178ffc657594b2ghbgpuphudcn00000008ng000000000hms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:02 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:02 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:02 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: f55e70bd-201e-003c-53b5-2330f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135302Z-178ffc65759ts6772vh1wvh4aw00000008hg00000000pqre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:02 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:02 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:02 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 28a1c0ad-d01e-0014-25b5-23ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135302Z-178ffc65759s2lrrn1hbsvp3a800000008m00000000079ks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 13:53:02 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:02 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:02 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:02 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: f20a10b6-d01e-0028-10b5-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135302Z-178ffc65759wtchcan29e9304c000000085000000000m0xd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:53:02 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:02 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:02 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:02 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 582cf517-101e-007a-0cb4-23047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135302Z-178ffc65759wtchcan29e9304c000000083g00000000q6dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:53:02 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:03 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:03 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:03 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 8779b63d-201e-0003-20b4-23f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135303Z-178ffc65759jpznb60zg85y410000000089000000000npfk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:53:03 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 13:53:03 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 13:53:03 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 13:53:03 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: f1cde990-c01e-00a2-61b4-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T135303Z-178ffc65759s2lrrn1hbsvp3a800000008k000000000bs6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 13:53:03 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: Acrobat.exePID: 5040, Parent PID: 2580

General

Target ID:	0
Start time:	09:51:42
Start date:	21/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: AcroCEF.exePID: 5224, Parent PID: 5040

General

Target ID:	1
Start time:	09:51:43
Start date:	21/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: AcroCEF.exePID: 7236, Parent PID: 5224

General

Target ID:	3
Start time:	09:51:43
Start date:	21/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1740,i,17710573424274876289,11473630335914496264,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 8128, Parent PID: 480

General

Target ID:	9
Start time:	09:52:08
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://alanymm.com/m/?c3Y9bzM2NV8xX3NwJnJhbmQ9T1hoQlpYZz0mdWlkPVVTRVIwMTEwMjAyNFUyNzEwMDEzNQ==N0123Nacontreras@drummondltd.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7828, Parent PID: 8128

General

Target ID:	10
Start time:	09:52:08
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2056,i,14952913253673879385,12020884399626894508,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\bd26cee1-259d-4b72-b280-1f878a0e4c8f.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241021135147Z-149.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.1216

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Windows Analysis Report
DRUMMONDLTD _ 21ST_OCTOBER_2024 _.PDF