Edit tour

Windows Analysis Report
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=policeanimalcontrol%40crgov.com&senderemailaddress=cvolkert%40douglas.co.us&senderorganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9y

Overview

General Information

Sample URL:	https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=policeanimalcontrol%40crgov.com&senderemailaddress=cvolkert%40douglas.co.us&senderorganization=AwGEAAAAAoAAAAADAQAAAHXZRXZE
Analysis ID:	1542220
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1744,i,10546162886671257772,14834690985333371397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1988 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=policeanimalcontrol%40crgov.com&senderemailaddress=cvolkert%40douglas.co.us&senderorganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT%2fekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com&consumerEncryption=false&senderorgid=d3204e62-5d1f-428d-90ae-ec95e74c18af&urldecoded=1&e4e_sdata=FR9cRcoDZqVue%2bO%2bn1%2fyYOLQ%2ftrZgZh5qJZyEpSyzZqwSQFyWEHIbcv9BkRXuzKjIXM5ypK41llMN1jbF%2bsdlodzrnfsIpi4rfunbLhjE3133ReR8wYmUjqLdoh7ByeCopvMq7WRUWQItwf%2f343DxcBR2m1hqAe%2b3pwawbGMtjhO5ppjoyWf5eLPecqX3o4uOlhguSCakSfP8oVo8tNVbmRWfD4NeWg6NL39fAHsRshF%2bR078m2jg%2fPnjueLfaIDOTn0jEH5fNZNVtk0Vi7foQhoZUbJRIJAZcP6qEQtk7gpaf8oLQndtEaUyuHwu%2f70fLcuhgB56L73j80mUESKEg%3d%3d" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49973 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /Encryption/retrieve.ashx?recipientemailaddress=policeanimalcontrol%40crgov.com&senderemailaddress=cvolkert%40douglas.co.us&senderorganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT%2fekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com&consumerEncryption=false&senderorgid=d3204e62-5d1f-428d-90ae-ec95e74c18af&urldecoded=1&e4e_sdata=FR9cRcoDZqVue%2bO%2bn1%2fyYOLQ%2ftrZgZh5qJZyEpSyzZqwSQFyWEHIbcv9BkRXuzKjIXM5ypK41llMN1jbF%2bsdlodzrnfsIpi4rfunbLhjE3133ReR8wYmUjqLdoh7ByeCopvMq7WRUWQItwf%2f343DxcBR2m1hqAe%2b3pwawbGMtjhO5ppjoyWf5eLPecqX3o4uOlhguSCakSfP8oVo8tNVbmRWfD4NeWg6NL39fAHsRshF%2bR078m2jg%2fPnjueLfaIDOTn0jEH5fNZNVtk0Vi7foQhoZUbJRIJAZcP6qEQtk7gpaf8oLQndtEaUyuHwu%2f70fLcuhgB56L73j80mUESKEg%3d%3d HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Encryption/default.aspx?itemID=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ==; X-MessageId=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b=SJ0PR09MB10289; X-OTPItemId=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b; X-SenderExternalOrganizationId=d3204e62-5d1f-428d-90ae-ec95e74c18af
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b&e4e_sdata=qzv%2fz%2bplRspRv14ZzGl8pJGStWaVZS%2fufZJupxU0tQUcBco8bO%2bopTabxk%2b1cAz2iIHLAz5fFZf%2bEDhNjYKE0glpQ%2brPMe%2bB7ymsLELxATIEtkIHgocruc%2fAQLymAWfD2vWiKLg5TEw2u8i7iNlsQytBFrGqqCMy56e%2fwwLJRZjmAgM%2fWDc%2f%2b%2bJuD7WhM2vtz2TG4prYKrSfMZm7L3mdYW6uo%2fPI8cI7lxbMTjSOLB7nNYnaJVFt0kQ9h9h2XFaUPIEhAWGh7J8z1i2FG3Gpdfb6BJEdzVPHygxeHqGPLOBb%2ffkW7M88s6ehLYSx4ofpvrSgoPstgzEz2I9gdZ8Urg%3d%3d HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ==; X-MessageId=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b=SJ0PR09MB10289; X-OTPItemId=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b; X-SenderExternalOrganizationId=d3204e62-5d1f-428d-90ae-ec95e74c18af
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Encryption/authentication.css HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b&e4e_sdata=qzv%2fz%2bplRspRv14ZzGl8pJGStWaVZS%2fufZJupxU0tQUcBco8bO%2bopTabxk%2b1cAz2iIHLAz5fFZf%2bEDhNjYKE0glpQ%2brPMe%2bB7ymsLELxATIEtkIHgocruc%2fAQLymAWfD2vWiKLg5TEw2u8i7iNlsQytBFrGqqCMy56e%2fwwLJRZjmAgM%2fWDc%2f%2b%2bJuD7WhM2vtz2TG4prYKrSfMZm7L3mdYW6uo%2fPI8cI7lxbMTjSOLB7nNYnaJVFt0kQ9h9h2XFaUPIEhAWGh7J8z1i2FG3Gpdfb6BJEdzVPHygxeHqGPLOBb%2ffkW7M88s6ehLYSx4ofpvrSgoPstgzEz2I9gdZ8Urg%3d%3dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ==; X-MessageId=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b=SJ0PR09MB10289; X-OTPItemId=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b; X-SenderExternalOrganizationId=d3204e62-5d1f-428d-90ae-ec95e74c18af; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Encryption/lock.png HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b&e4e_sdata=qzv%2fz%2bplRspRv14ZzGl8pJGStWaVZS%2fufZJupxU0tQUcBco8bO%2bopTabxk%2b1cAz2iIHLAz5fFZf%2bEDhNjYKE0glpQ%2brPMe%2bB7ymsLELxATIEtkIHgocruc%2fAQLymAWfD2vWiKLg5TEw2u8i7iNlsQytBFrGqqCMy56e%2fwwLJRZjmAgM%2fWDc%2f%2b%2bJuD7WhM2vtz2TG4prYKrSfMZm7L3mdYW6uo%2fPI8cI7lxbMTjSOLB7nNYnaJVFt0kQ9h9h2XFaUPIEhAWGh7J8z1i2FG3Gpdfb6BJEdzVPHygxeHqGPLOBb%2ffkW7M88s6ehLYSx4ofpvrSgoPstgzEz2I9gdZ8Urg%3d%3dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ==; X-MessageId=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b=SJ0PR09MB10289; X-OTPItemId=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b; X-SenderExternalOrganizationId=d3204e62-5d1f-428d-90ae-ec95e74c18af; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Encryption/liveid.png HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b&e4e_sdata=qzv%2fz%2bplRspRv14ZzGl8pJGStWaVZS%2fufZJupxU0tQUcBco8bO%2bopTabxk%2b1cAz2iIHLAz5fFZf%2bEDhNjYKE0glpQ%2brPMe%2bB7ymsLELxATIEtkIHgocruc%2fAQLymAWfD2vWiKLg5TEw2u8i7iNlsQytBFrGqqCMy56e%2fwwLJRZjmAgM%2fWDc%2f%2b%2bJuD7WhM2vtz2TG4prYKrSfMZm7L3mdYW6uo%2fPI8cI7lxbMTjSOLB7nNYnaJVFt0kQ9h9h2XFaUPIEhAWGh7J8z1i2FG3Gpdfb6BJEdzVPHygxeHqGPLOBb%2ffkW7M88s6ehLYSx4ofpvrSgoPstgzEz2I9gdZ8Urg%3d%3dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ==; X-MessageId=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b=SJ0PR09MB10289; X-OTPItemId=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b; X-SenderExternalOrganizationId=d3204e62-5d1f-428d-90ae-ec95e74c18af; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Encryption/lock.png HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ==; X-MessageId=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b=SJ0PR09MB10289; X-OTPItemId=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b; X-SenderExternalOrganizationId=d3204e62-5d1f-428d-90ae-ec95e74c18af; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Encryption/liveid.png HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ==; X-MessageId=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b=SJ0PR09MB10289; X-OTPItemId=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b; X-SenderExternalOrganizationId=d3204e62-5d1f-428d-90ae-ec95e74c18af; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: r1.res.office365.com

Source: chromecache_72.2.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.12.4.min.js
Source: chromecache_72.2.dr	String found in binary or memory: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=1736cb2d-2432-4361-a5b0-8e7
Source: chromecache_71.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
Source: chromecache_71.2.dr	String found in binary or memory: https://o365exchange.visualstudio.com/IP%20Engineering/_queries/edit/1648312
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/15.20.8093.23/resources/images/0/favicon.ico

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49973 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/22@14/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1744,i,10546162886671257772,14834690985333371397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=policeanimalcontrol%40crgov.com&senderemailaddress=cvolkert%40douglas.co.us&senderorganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT%2fekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com&consumerEncryption=false&senderorgid=d3204e62-5d1f-428d-90ae-ec95e74c18af&urldecoded=1&e4e_sdata=FR9cRcoDZqVue%2bO%2bn1%2fyYOLQ%2ftrZgZh5qJZyEpSyzZqwSQFyWEHIbcv9BkRXuzKjIXM5ypK41llMN1jbF%2bsdlodzrnfsIpi4rfunbLhjE3133ReR8wYmUjqLdoh7ByeCopvMq7WRUWQItwf%2f343DxcBR2m1hqAe%2b3pwawbGMtjhO5ppjoyWf5eLPecqX3o4uOlhguSCakSfP8oVo8tNVbmRWfD4NeWg6NL39fAHsRshF%2bR078m2jg%2fPnjueLfaIDOTn0jEH5fNZNVtk0Vi7foQhoZUbJRIJAZcP6qEQtk7gpaf8oLQndtEaUyuHwu%2f70fLcuhgB56L73j80mUESKEg%3d%3d"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1744,i,10546162886671257772,14834690985333371397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
HHN-efz.ms-acdc.office.com	52.98.152.162	true	false	unknown
FRA-efz.ms-acdc.office.com	52.98.252.82	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
r1.res.office365.com	unknown	unknown	false	unknown
ajax.aspnetcdn.com	unknown	unknown	false	unknown
outlook.office365.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://outlook.office365.com/Encryption/default.aspx?itemID=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b	false	unknown
https://outlook.office365.com/Encryption/lock.png	false	unknown
https://outlook.office365.com/Encryption/authentication.css	false	unknown
https://outlook.office365.com/Encryption/liveid.png	false	unknown
https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b&e4e_sdata=qzv%2fz%2bplRspRv14ZzGl8pJGStWaVZS%2fufZJupxU0tQUcBco8bO%2bopTabxk%2b1cAz2iIHLAz5fFZf%2bEDhNjYKE0glpQ%2brPMe%2bB7ymsLELxATIEtkIHgocruc%2fAQLymAWfD2vWiKLg5TEw2u8i7iNlsQytBFrGqqCMy56e%2fwwLJRZjmAgM%2fWDc%2f%2b%2bJuD7WhM2vtz2TG4prYKrSfMZm7L3mdYW6uo%2fPI8cI7lxbMTjSOLB7nNYnaJVFt0kQ9h9h2XFaUPIEhAWGh7J8z1i2FG3Gpdfb6BJEdzVPHygxeHqGPLOBb%2ffkW7M88s6ehLYSx4ofpvrSgoPstgzEz2I9gdZ8Urg%3d%3d	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.12.4.min.js	chromecache_72.2.dr	false	unknown
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=1736cb2d-2432-4361-a5b0-8e7	chromecache_72.2.dr	false	unknown
https://o365exchange.visualstudio.com/IP%20Engineering/_queries/edit/1648312	chromecache_71.2.dr	false	unknown
https://r1.res.office365.com/owa/prem/15.20.8093.23/resources/images/0/favicon.ico	chromecache_72.2.dr	false	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css	chromecache_71.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
52.98.252.82	FRA-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.98.152.162	HHN-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542220
Start date and time:	2024-10-25 17:02:47 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=policeanimalcontrol%40crgov.com&senderemailaddress=cvolkert%40douglas.co.us&senderorganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT%2fekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com&consumerEncryption=false&senderorgid=d3204e62-5d1f-428d-90ae-ec95e74c18af&urldecoded=1&e4e_sdata=FR9cRcoDZqVue%2bO%2bn1%2fyYOLQ%2ftrZgZh5qJZyEpSyzZqwSQFyWEHIbcv9BkRXuzKjIXM5ypK41llMN1jbF%2bsdlodzrnfsIpi4rfunbLhjE3133ReR8wYmUjqLdoh7ByeCopvMq7WRUWQItwf%2f343DxcBR2m1hqAe%2b3pwawbGMtjhO5ppjoyWf5eLPecqX3o4uOlhguSCakSfP8oVo8tNVbmRWfD4NeWg6NL39fAHsRshF%2bR078m2jg%2fPnjueLfaIDOTn0jEH5fNZNVtk0Vi7foQhoZUbJRIJAZcP6qEQtk7gpaf8oLQndtEaUyuHwu%2f70fLcuhgB56L73j80mUESKEg%3d%3d
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/22@14/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 142.250.185.238, 142.250.110.84, 34.104.35.123, 4.175.87.197, 199.232.214.172, 192.229.221.95, 13.85.23.206, 152.199.19.160, 23.38.98.104, 23.38.98.96, 142.250.186.163
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, wildcard.res.office365.com.edgekey.net, e40491.dscd.akamaiedge.net, clientservices.googleapis.com, clients2.google.com, mscomajax.vo.msecnd.net, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, cs22.wpc.v0cdn.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=policeanimalcontrol%40crgov.com&senderemailaddress=cvolkert%40douglas.co.us&senderorganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT%2fekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com&consumerEncryption=false&senderorgid=d3204e62-5d1f-428d-90ae-ec95e74c18af&urldecoded=1&e4e_sdata=FR9cRcoDZqVue%2bO%2bn1%2fyYOLQ%2ftrZgZh5qJZyEpSyzZqwSQFyWEHIbcv9BkRXuzKjIXM5ypK41llMN1jbF%2bsdlodzrnfsIpi4rfunbLhjE3133ReR8wYmUjqLdoh7ByeCopvMq7WRUWQItw

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 14:03:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.966916973549238
Encrypted:	false
SSDEEP:	48:8idKQTq0BNHnidAKZdA19ehwiZUklqehN5y+3:8QX/05y
MD5:	5AD64FE4DEE0953DAB0EA19D01910B21
SHA1:	DF3EA983B9E87E0D7A3AD21A454FE99D3E711207
SHA-256:	55B50A8235A51B4A571FFC23D141B6355BF8FDC67F79E68C9B83619A45528177
SHA-512:	FEA1EC91A55D108549ACD2249B9BB37C4510BA2B1D720CB6ADE54E102930215E9CA44A7FD9BA9E7809AD3581280BB75C0D21863E9EC1F17FD9D6381CD8413C98
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....G.p..&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYYtx....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYYtx....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYYtx....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYYtx..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYYvx...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............dG.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 14:03:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.983090578033167
Encrypted:	false
SSDEEP:	48:8edKQTq0BNHnidAKZdA1weh/iZUkAQkqehk5y+2:8EXF9Q35y
MD5:	E2A8735B74F5B6993461DBC698BBA4BF
SHA1:	8D9A1964B79A5E03F67B4E36C1383A485760C001
SHA-256:	DAC34F8F05DC291AAE6EB55463EACD8FFD1055D1BC84F4F539A08377587267CC
SHA-512:	3F006FC100C514D1CB949B2EA97AA6FBDF5335EBFDD0B8FB57A9FB79745D0EB464AC23DFD3D3844250C655300071FEF42D7ABBC9CE63D73926D29F12857629C2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....@.c..&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYYtx....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYYtx....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYYtx....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYYtx..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYYvx...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............dG.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.997041859510451
Encrypted:	false
SSDEEP:	48:8xSdKQTq0BsHnidAKZdA14tseh7sFiZUkmgqeh7sW5y+BX:8xAXen45y
MD5:	BB378C98B48925554A1EAF76933479D2
SHA1:	46DE08C37D6B555B9BAFAA8EF49F64EEC5BBB38B
SHA-256:	55D1F50260DC55D66571E13257AFE4EFB1B85BE05D929F5728DBE0B34003D2B8
SHA-512:	2AB5E11B424837A31FBDBBF921D088F813CFC80C1D23825300CE9D2261CCF7576B00D0C6F195B29DD478DF9E417AB7F58E362ED92B565D0E7192237B1828E729
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYYtx....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYYtx....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYYtx....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYYtx..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............dG.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 14:03:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9841295891160677
Encrypted:	false
SSDEEP:	48:8VdKQTq0BNHnidAKZdA1vehDiZUkwqehA5y+R:8lXGe5y
MD5:	CDE325D35DC041D711294768F6BFFEA0
SHA1:	268ECB398D5F0FE23B65C7C821EF9F6DAB0C50AD
SHA-256:	543DF28426A2FD2545140237E8ADA9817976F98536C0E01A2A3EF1C350E7AE89
SHA-512:	D64F5BA680BD041DCF9A84C87D97CCD3CCFFB6285CAA694106634F3B1484988215CDFE6FF9481DF9E37C3F71DC9E612F4A304A77053B154AFF894682FE12C3F3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....@^..&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYYtx....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYYtx....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYYtx....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYYtx..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYYvx...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............dG.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 14:03:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.969727714362285
Encrypted:	false
SSDEEP:	48:8uSdKQTq0BNHnidAKZdA1hehBiZUk1W1qeh65y+C:8uAXG9a5y
MD5:	D89E8684F644337DA356BE61AA28A2A3
SHA1:	D8BE80EA5E8E09A095A3446BB8FDE2ABC31A9DD9
SHA-256:	F7E19E30B9567A2CC415F5272FF1526C17D39300CC294101FAE42588F17AAB87
SHA-512:	2791D7F68397CC844AA65E7D6BC01DD9C4D2235C78BD18DCCFC5FFB2D83D940161D2264235A300E9FFFD93F0F6B76C3C8569526977359D93A58CEDB1621EB3E9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....\j..&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYYtx....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYYtx....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYYtx....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYYtx..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYYvx...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............dG.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 14:03:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.980086095178148
Encrypted:	false
SSDEEP:	48:8fdKQTq0BNHnidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb45y+yT+:8HXYT/TbxWOvTb45y7T
MD5:	B616894825E6CBB927BCF36F00632556
SHA1:	EFDF003729CAB331CDBD013E1F4E4189DEE1F405
SHA-256:	A92A6A460792EED0E7AA5CE46CA0172D0EA58F01884B02E2944F241CA1440D60
SHA-512:	D2F14CAABFB5DB131299BA892EB13A05E3811D2FCE8A1BDDBAF43E7A15C4D70281D06E7CD8AD1D310F70E71035AC6EB516D47950E4A3E17A4A81A941F5F73622
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....p.U..&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYYtx....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYYtx....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYYtx....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYYtx..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYYvx...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............dG.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32077)
Category:	downloaded
Size (bytes):	97163
Entropy (8bit):	5.373204330051448
Encrypted:	false
SSDEEP:	1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV
MD5:	4F252523D4AF0B478C810C2547A63E19
SHA1:	5A9DCFBEF655A2668E78BAEBEAA8DC6F41D8DABB
SHA-256:	668B046D12DB350CCBA6728890476B3EFEE53B2F42DBB84743E5E9F1AE0CC404
SHA-512:	8C6B0C1FCDE829EF5AB02A643959019D4AC30D3A7CC25F9A7640760FEFFF26D9713B84AB2E825D85B3B2B08150265A10143F82E05975ACCB10645EFA26357479
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.12.4.min.js
Preview:	/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2955
Entropy (8bit):	7.853182148758864
Encrypted:	false
SSDEEP:	48:CocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODh+YPLIdqc:CZ/I09Da01l+gmkyTt6Hk8nTtc
MD5:	2F6B2AC283DCE9A4930FF7AAD20556B0
SHA1:	D552F0DD2FA493111D303CF014F350FF3C5D789D
SHA-256:	DA7B1E7C0E95A9CABA46BE191F562268CEE236556F67E4B10F2B3A05785B9CAD
SHA-512:	9326C5F1FE1B8EF2FD095DBC40FB94F72D6BCBD38BC63598467C3F9AFD9A5E6E182CF88B67F3797F78D31535B4465ECA62118395C96598CA34ABD98DF89F24AD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............pHYs...#...#.x.?v...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.3527805169937888
Encrypted:	false
SSDEEP:	24:uBt4Xx4WdZSKhds/KIaCBD4+VLmNmPmTkVKva0bb1FrCyRwGiuaa4sjgV6m2/NUZ:uB+XA3RByBLCDuvjjgSKsx7cccccb
MD5:	F82312F1281E8D6C87F7FFCA0A7D147C
SHA1:	103D0C7B915B40584E0543856E87B360568FE8C8
SHA-256:	DEC51A1A5C6F5DADDEBE7C7D1048319969446F03DE89A953C3C3514F8DB08E8A
SHA-512:	C9EA288CC6D9D4B9872FCC49FD2AD461C9600B807311CD82C07C68465224D3A6004FA89F60088A34BBCF4CA96404F5A1B01E6009CA4FD964D63A53CF856F7C0C
Malicious:	false
Reputation:	low
URL:	https://r1.res.office365.com/owa/prem/15.20.8093.23/resources/images/0/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... .....@....................................................................................................x...x.!.x.I.x.].................................x.C.x.m.x...x...x...x...x...x...................................x...x...x...x...x...x...x...x...................................x...x...x...t...w...x...x...v...(o.u...x...x...x...x...........x...x...x...s..8..t...x...u....w.u...x...x...x...x...........x...o.............(..x...u.../w.l...v...x...x...x...........x...{.......d...z..v..t...u....Bw.....N..q...x...x...........x...u.......b......i..u...q....w.{!......n...x...........x...r...t..........w...x...v..."w.u...q....T.....u...........x...x...r...\|...t...w...x...u...2{.t...x...u...~%.............x...x...x...x...x...x...x...w....G.v...x...x...w...u...........x...x...x...x...x...x...x...x...................................x...x...x.E.x.o.x...x...x...x.......................................................x...x

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	6.346231859040133
Encrypted:	false
SSDEEP:	24:K1hpunQWwjx82lY2T32HEVqLWaeLJyJ3V0LcMLGG5PrLSHhxCt+2l9:oitNn2VpaJ3HerLSBxCtP9
MD5:	A1714B03531B66BD4E47409A42E40586
SHA1:	4B883D903A613D230259DD981065636BCC8DB6F7
SHA-256:	55400220F8792E5146328487B0DBBB259A3F558E8FD51F2B445A5DDB6BC1608E
SHA-512:	411FD6DB3CFE4912392DC4CBBEDB41AF9423048099FE63B4B53A9E7168111586282CF94773CC84E9078F0E38DAB207419019F3E20F0211585DB45ED91462B53B
Malicious:	false
Reputation:	low
URL:	https://outlook.office365.com/Encryption/lock.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:E6B6ED2E994911E190AEAF7FBE865C77" xmpMM:DocumentID="xmp.did:E6B6ED2F994911E190AEAF7FBE865C77"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E6B6ED2C994911E190AEAF7FBE865C77" stRef:documentID="xmp.did:E6B6ED2D994911E190AEAF7FBE865C77"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.b...?.%..].....H..q,.K..S ...}............W..q ..............Hm..\.mS..s..d ..._F6...@K(..M\|+.6Cw....P.>.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1100
Entropy (8bit):	6.346231859040133
Encrypted:	false
SSDEEP:	24:K1hpunQWwjx82lY2T32HEVqLWaeLJyJ3V0LcMLGG5PrLSHhxCt+2l9:oitNn2VpaJ3HerLSBxCtP9
MD5:	A1714B03531B66BD4E47409A42E40586
SHA1:	4B883D903A613D230259DD981065636BCC8DB6F7
SHA-256:	55400220F8792E5146328487B0DBBB259A3F558E8FD51F2B445A5DDB6BC1608E
SHA-512:	411FD6DB3CFE4912392DC4CBBEDB41AF9423048099FE63B4B53A9E7168111586282CF94773CC84E9078F0E38DAB207419019F3E20F0211585DB45ED91462B53B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:E6B6ED2E994911E190AEAF7FBE865C77" xmpMM:DocumentID="xmp.did:E6B6ED2F994911E190AEAF7FBE865C77"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E6B6ED2C994911E190AEAF7FBE865C77" stRef:documentID="xmp.did:E6B6ED2D994911E190AEAF7FBE865C77"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.b...?.%..].....H..q,.K..S ...}............W..q ..............Hm..\.mS..s..d ..._F6...@K(..M\|+.6Cw....P.>.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2955
Entropy (8bit):	7.853182148758864
Encrypted:	false
SSDEEP:	48:CocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODh+YPLIdqc:CZ/I09Da01l+gmkyTt6Hk8nTtc
MD5:	2F6B2AC283DCE9A4930FF7AAD20556B0
SHA1:	D552F0DD2FA493111D303CF014F350FF3C5D789D
SHA-256:	DA7B1E7C0E95A9CABA46BE191F562268CEE236556F67E4B10F2B3A05785B9CAD
SHA-512:	9326C5F1FE1B8EF2FD095DBC40FB94F72D6BCBD38BC63598467C3F9AFD9A5E6E182CF88B67F3797F78D31535B4465ECA62118395C96598CA34ABD98DF89F24AD
Malicious:	false
Reputation:	low
URL:	https://outlook.office365.com/Encryption/liveid.png
Preview:	.PNG........IHDR...P...P............pHYs...#...#.x.?v...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32077)
Category:	dropped
Size (bytes):	97163
Entropy (8bit):	5.373204330051448
Encrypted:	false
SSDEEP:	1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV
MD5:	4F252523D4AF0B478C810C2547A63E19
SHA1:	5A9DCFBEF655A2668E78BAEBEAA8DC6F41D8DABB
SHA-256:	668B046D12DB350CCBA6728890476B3EFEE53B2F42DBB84743E5E9F1AE0CC404
SHA-512:	8C6B0C1FCDE829EF5AB02A643959019D4AC30D3A7CC25F9A7640760FEFFF26D9713B84AB2E825D85B3B2B08150265A10143F82E05975ACCB10645EFA26357479
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3304
Entropy (8bit):	5.034048268230628
Encrypted:	false
SSDEEP:	96:UxL7ynHvWj4X+0/l3iwboLbuvNnZZrzz8kFr:Ul73wTb8buvJZZB
MD5:	3F551716BD63A0A2CFB3384B3A56611C
SHA1:	80FEFB90F288D7C1F28FFA9616239776F86DE12A
SHA-256:	08A857EEEC64D9C6B3ECE76762EED837929E0E6F8A29D1315A04D38C3053B4B6
SHA-512:	D34C1466AA8059401D6A2BB12E96552D6C7D722F74AD97D1B8A8AEC67116B35D903671155BBF5CBD96129A646A2BEABEF39B6BB68F7A50DAAC9EEDB8C876E3D7
Malicious:	false
Reputation:	low
URL:	https://outlook.office365.com/Encryption/authentication.css
Preview:	/.. The base styles is used only by authentication page... The css styles are from <linkrel="stylesheet"href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">.. tha tauthentication page used to reference. However, it's causing narrator issue where it's announcing "table" for every "<div>".. Bug: https://o365exchange.visualstudio.com/IP%20Engineering/_queries/edit/1648312.. /....* {.. -webkit-box-sizing:border-box;-.. moz-box-sizing:border-box;.. box-sizing:border-box;..}....body {.. font-family:"HelveticaNeue",Helvetica,Arial,sans-serif;.. font-size:14px;.. line-height:1.42857143;.. color:#333;.. background-color:#fff;.. margin:0..}....button,.input,.select,.textarea {.. font-family:inherit;.. font-size:inherit;.. line-height:inherit..}....p {.. margin:0010px..}....a {.. color:#337ab7;.. text-decoration:none..}..a:focus,.a:hover {.. color:#23527c;.. text-decoration:underline..}..a:focus {.. ou

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8256
Entropy (8bit):	5.024352594939348
Encrypted:	false
SSDEEP:	96:EnOcGi3svM+iJvi656GRsvMk1PRsvMlqckIpra+5rN5WcqMRUScx1B1ye2MxD+Z8:EnF+IVnSnAvIpOexRU9x1Tye2kD+JZJw
MD5:	3290A12B5FF4639F52F04204A68CB9D5
SHA1:	043A459E75592022CCAFDEDA240C5BE0D903BFC0
SHA-256:	0D8EA52E5E431A0C0D2AFB5FA93CDBE644FE516FD3F21DB7A6AB673835392E94
SHA-512:	9E92C7B0B0D931EE8A98B85B01470094633E93A87FC8401436269447E93132D92A1D3E41D2D1025B19821AFF8EFDD1BABFFD2B258C3AFC57B681ACBADC6244F1
Malicious:	false
Reputation:	low
URL:	https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b&e4e_sdata=qzv%2fz%2bplRspRv14ZzGl8pJGStWaVZS%2fufZJupxU0tQUcBco8bO%2bopTabxk%2b1cAz2iIHLAz5fFZf%2bEDhNjYKE0glpQ%2brPMe%2bB7ymsLELxATIEtkIHgocruc%2fAQLymAWfD2vWiKLg5TEw2u8i7iNlsQytBFrGqqCMy56e%2fwwLJRZjmAgM%2fWDc%2f%2b%2bJuD7WhM2vtz2TG4prYKrSfMZm7L3mdYW6uo%2fPI8cI7lxbMTjSOLB7nNYnaJVFt0kQ9h9h2XFaUPIEhAWGh7J8z1i2FG3Gpdfb6BJEdzVPHygxeHqGPLOBb%2ffkW7M88s6ehLYSx4ofpvrSgoPstgzEz2I9gdZ8Urg%3d%3d
Preview:	....<!DOCTYPE html>....<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">..<head>.. <meta charset="utf-8">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <meta name="e4ePage" content="authenticationpage.aspx"/>.. <script src="https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.12.4.min.js"></script>.. <title>Encrypted Message Authentication</title>.. <link rel="shortcut icon" href="https://r1.res.office365.com/owa/prem/15.20.8093.23/resources/images/0/favicon.ico" type="image/x-icon" />.. <link rel="stylesheet" type="text/css" href="authentication.css">.... <script>.. $(document).ready(function() {.. $("#signinButton").click(function() {.. LogOAuthSignIn('Microsoft', 'signinbutton', 'user clicked sign in button');.... var url = "https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=1736cb2d-2432-436

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.3527805169937888
Encrypted:	false
SSDEEP:	24:uBt4Xx4WdZSKhds/KIaCBD4+VLmNmPmTkVKva0bb1FrCyRwGiuaa4sjgV6m2/NUZ:uB+XA3RByBLCDuvjjgSKsx7cccccb
MD5:	F82312F1281E8D6C87F7FFCA0A7D147C
SHA1:	103D0C7B915B40584E0543856E87B360568FE8C8
SHA-256:	DEC51A1A5C6F5DADDEBE7C7D1048319969446F03DE89A953C3C3514F8DB08E8A
SHA-512:	C9EA288CC6D9D4B9872FCC49FD2AD461C9600B807311CD82C07C68465224D3A6004FA89F60088A34BBCF4CA96404F5A1B01E6009CA4FD964D63A53CF856F7C0C
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... .....@....................................................................................................x...x.!.x.I.x.].................................x.C.x.m.x...x...x...x...x...x...................................x...x...x...x...x...x...x...x...................................x...x...x...t...w...x...x...v...(o.u...x...x...x...x...........x...x...x...s..8..t...x...u....w.u...x...x...x...x...........x...o.............(..x...u.../w.l...v...x...x...x...........x...{.......d...z..v..t...u....Bw.....N..q...x...x...........x...u.......b......i..u...q....w.{!......n...x...........x...r...t..........w...x...v..."w.u...q....T.....u...........x...x...r...\|...t...w...x...u...2{.t...x...u...~%.............x...x...x...x...x...x...x...w....G.v...x...x...w...u...........x...x...x...x...x...x...x...x...................................x...x...x.E.x.o.x...x...x...x.......................................................x...x

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 17:03:36.521198988 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 25, 2024 17:03:36.536921978 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 25, 2024 17:03:36.661815882 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 25, 2024 17:03:43.946523905 CEST	49709	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:43.946610928 CEST	443	49709	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:43.946681023 CEST	49709	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:43.946780920 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:43.946830988 CEST	443	49710	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:43.946888924 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:43.947005987 CEST	49709	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:43.947041035 CEST	443	49709	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:43.947144985 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:43.947164059 CEST	443	49710	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.081753016 CEST	443	49709	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.082006931 CEST	49709	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:45.082034111 CEST	443	49709	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.083173990 CEST	443	49710	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.083411932 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:45.083470106 CEST	443	49710	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.083776951 CEST	443	49709	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.083841085 CEST	49709	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:45.083851099 CEST	443	49709	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.083895922 CEST	49709	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:45.084944963 CEST	49709	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:45.085041046 CEST	443	49709	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.085144043 CEST	443	49710	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.085222960 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:45.085249901 CEST	443	49710	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.085313082 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:45.085357904 CEST	49709	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:45.085366964 CEST	443	49709	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.086417913 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:45.086510897 CEST	443	49710	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.133059978 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:45.133105993 CEST	49709	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:45.133117914 CEST	443	49710	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:45.186536074 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:46.124846935 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 25, 2024 17:03:46.142170906 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 25, 2024 17:03:46.265280962 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 25, 2024 17:03:46.358091116 CEST	49713	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:03:46.358146906 CEST	443	49713	142.250.184.196	192.168.2.5
Oct 25, 2024 17:03:46.358217955 CEST	49713	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:03:46.359031916 CEST	49713	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:03:46.359067917 CEST	443	49713	142.250.184.196	192.168.2.5
Oct 25, 2024 17:03:47.242733955 CEST	49714	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:47.242832899 CEST	443	49714	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:47.243041992 CEST	49714	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:47.244544983 CEST	49714	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:47.244580984 CEST	443	49714	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:47.254492998 CEST	443	49713	142.250.184.196	192.168.2.5
Oct 25, 2024 17:03:47.254897118 CEST	49713	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:03:47.254959106 CEST	443	49713	142.250.184.196	192.168.2.5
Oct 25, 2024 17:03:47.256655931 CEST	443	49713	142.250.184.196	192.168.2.5
Oct 25, 2024 17:03:47.256736040 CEST	49713	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:03:47.478733063 CEST	49713	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:03:47.479027033 CEST	443	49713	142.250.184.196	192.168.2.5
Oct 25, 2024 17:03:47.535120964 CEST	49713	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:03:47.535162926 CEST	443	49713	142.250.184.196	192.168.2.5
Oct 25, 2024 17:03:47.576785088 CEST	49713	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:03:48.030919075 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 25, 2024 17:03:48.031080008 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 25, 2024 17:03:48.124619961 CEST	443	49714	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:48.124738932 CEST	49714	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:48.134157896 CEST	49714	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:48.134210110 CEST	443	49714	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:48.134620905 CEST	443	49714	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:48.186918974 CEST	49714	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:48.277045012 CEST	49714	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:48.319338083 CEST	443	49714	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:48.524938107 CEST	443	49714	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:48.525110006 CEST	443	49714	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:48.525279045 CEST	49714	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:48.532015085 CEST	49714	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:48.532015085 CEST	49714	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:48.532064915 CEST	443	49714	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:48.532090902 CEST	443	49714	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:48.571774006 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:48.571815968 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:48.571887970 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:48.572179079 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:48.572197914 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:49.193039894 CEST	443	49709	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:49.193121910 CEST	49709	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:49.193169117 CEST	443	49709	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:49.196115971 CEST	49709	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:49.196252108 CEST	443	49709	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:49.196332932 CEST	49709	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:49.200906038 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:49.201039076 CEST	443	49710	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:49.429181099 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:49.429275036 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:49.434855938 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:49.434865952 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:49.435271978 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:49.438672066 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:49.483336926 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:49.872919083 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:49.873091936 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:49.873186111 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:49.875627041 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:49.875639915 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:49.875660896 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 25, 2024 17:03:49.875668049 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 25, 2024 17:03:50.754101992 CEST	443	49710	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:50.799294949 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:50.799319983 CEST	443	49710	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:50.799726963 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:50.799887896 CEST	443	49710	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:50.799954891 CEST	49710	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:50.802292109 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:50.802391052 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:50.802465916 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:50.802706957 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:50.802742958 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:51.972424984 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:51.975609064 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:51.975658894 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:51.979305029 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:51.979415894 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:51.979439020 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:51.979512930 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:51.979846001 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:51.980026960 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:51.980077028 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:51.980189085 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:52.032023907 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:52.032066107 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:03:52.078810930 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:03:55.464904070 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:55.464988947 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:55.465076923 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:55.465362072 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:55.465399027 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.207041979 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.207153082 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.210844994 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.210867882 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.211270094 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.222604036 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.263360023 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.466794014 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.466824055 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.466847897 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.466942072 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.466969967 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.467041016 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.585450888 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.585490942 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.585568905 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.585593939 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.585627079 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.585649967 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.701391935 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.701414108 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.701508999 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.701575994 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.701646090 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.701647043 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.819103956 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.819127083 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.819241047 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.819299936 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.819593906 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.935985088 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.936006069 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.936101913 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:56.936125040 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:56.936192036 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.053015947 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.053036928 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.053131104 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.053153992 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.053419113 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.169934988 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.169956923 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.170062065 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.170084000 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.170118093 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.170141935 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.245244980 CEST	443	49713	142.250.184.196	192.168.2.5
Oct 25, 2024 17:03:57.245400906 CEST	443	49713	142.250.184.196	192.168.2.5
Oct 25, 2024 17:03:57.245482922 CEST	49713	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:03:57.287159920 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.287178993 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.287256002 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.287271023 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.287359953 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.287359953 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.371716022 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.371736050 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.371953011 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.371974945 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.372078896 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.445641041 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.445662022 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.445787907 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.445827007 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.448841095 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.523524046 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.523544073 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.523655891 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.523715973 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.523825884 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.638756990 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.638778925 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.638890028 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.638950109 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.639043093 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.723268032 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.723288059 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.723351002 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.723385096 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.723408937 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.723440886 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.756108999 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.756181955 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.756196022 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.756264925 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.756381989 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.756417036 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.756443024 CEST	49717	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.756458044 CEST	443	49717	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.837136030 CEST	49720	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.837183952 CEST	443	49720	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.837378025 CEST	49720	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.838036060 CEST	49721	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.838119984 CEST	443	49721	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.838193893 CEST	49721	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.839246035 CEST	49722	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.839256048 CEST	443	49722	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.839622974 CEST	49720	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.839637041 CEST	443	49720	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.839719057 CEST	49722	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.839766026 CEST	49723	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.839790106 CEST	443	49723	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.839854956 CEST	49723	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.839993954 CEST	49721	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.840034962 CEST	443	49721	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.840056896 CEST	49723	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.840081930 CEST	443	49723	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.840359926 CEST	49722	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.840379000 CEST	443	49722	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.841403961 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.841515064 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:57.841603994 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.841700077 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:57.841723919 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.562515974 CEST	443	49720	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.563148022 CEST	49720	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.563169003 CEST	443	49720	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.564100981 CEST	49720	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.564106941 CEST	443	49720	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.577558994 CEST	443	49722	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.578208923 CEST	49722	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.578222990 CEST	443	49722	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.578953028 CEST	49722	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.578962088 CEST	443	49722	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.588577032 CEST	443	49723	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.588871002 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.589266062 CEST	443	49721	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.589296103 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.589299917 CEST	49723	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.589340925 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.589360952 CEST	443	49723	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.589663029 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.589677095 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.589876890 CEST	49721	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.589911938 CEST	443	49721	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.590078115 CEST	49723	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.590090036 CEST	443	49723	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.590339899 CEST	49721	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.590349913 CEST	443	49721	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.692548037 CEST	443	49720	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.692579985 CEST	443	49720	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.692636013 CEST	49720	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.692651033 CEST	443	49720	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.692667007 CEST	443	49720	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.692697048 CEST	49720	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.692742109 CEST	49720	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.692985058 CEST	49720	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.693001986 CEST	443	49720	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.693030119 CEST	49720	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.693034887 CEST	443	49720	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.696271896 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.696300983 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.696455002 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.696674109 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.696687937 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.709753036 CEST	443	49722	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.709814072 CEST	443	49722	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.709883928 CEST	49722	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.709892035 CEST	443	49722	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.709944010 CEST	49722	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.710045099 CEST	49722	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.710051060 CEST	443	49722	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.710061073 CEST	49722	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.710103035 CEST	443	49722	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.710208893 CEST	443	49722	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.712258101 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.712335110 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.712455034 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.712629080 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.712658882 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.720973015 CEST	443	49723	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.721024990 CEST	443	49723	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.721101046 CEST	49723	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.721131086 CEST	443	49723	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.721163034 CEST	443	49723	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.721220016 CEST	49723	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.721585989 CEST	49723	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.721626997 CEST	443	49723	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.721659899 CEST	49723	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.721673965 CEST	443	49723	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.722434044 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.722572088 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.722640038 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.722779036 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.722805023 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.722834110 CEST	49724	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.722850084 CEST	443	49724	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.724632978 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.724642038 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.724836111 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.725208998 CEST	49731	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.725236893 CEST	443	49731	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.725313902 CEST	49731	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.725347996 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.725358963 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.725429058 CEST	443	49721	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.725435972 CEST	49731	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.725460052 CEST	443	49731	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.726114035 CEST	443	49721	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.726182938 CEST	49721	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.726217985 CEST	49721	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.726231098 CEST	443	49721	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.728466034 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.728499889 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.728595018 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.728688002 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:58.728717089 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:58.847496986 CEST	49713	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:03:58.847560883 CEST	443	49713	142.250.184.196	192.168.2.5
Oct 25, 2024 17:03:59.443468094 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.444176912 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.444219112 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.445305109 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.445312023 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.460010052 CEST	443	49731	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.460573912 CEST	49731	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.460628033 CEST	443	49731	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.461524963 CEST	49731	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.461539984 CEST	443	49731	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.465563059 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.466063976 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.466083050 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.466959000 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.466965914 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.490170956 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.492641926 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.492731094 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.494352102 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.494405985 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.549804926 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.551238060 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.551274061 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.555028915 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.555039883 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.575213909 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.575417042 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.575850010 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.575886011 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.575903893 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.575921059 CEST	49728	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.575927973 CEST	443	49728	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.581749916 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.581844091 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.581937075 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.582252979 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.582346916 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.593170881 CEST	443	49731	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.593319893 CEST	443	49731	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.593374968 CEST	49731	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.595925093 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.596065998 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.596183062 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.596323967 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.596329927 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.596343040 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.596348047 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.598113060 CEST	49731	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.598162889 CEST	443	49731	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.598212004 CEST	49731	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.598228931 CEST	443	49731	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.603180885 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.603215933 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.603276014 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.604399920 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.604428053 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.604594946 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.605180025 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.605192900 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.605312109 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.605331898 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.625118971 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.625271082 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.625345945 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.625998974 CEST	49732	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.626039028 CEST	443	49732	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.632266998 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.632350922 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.632544994 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.632905006 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.632940054 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.684454918 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.684602976 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.684668064 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.690597057 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.690644979 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.690685034 CEST	49729	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.690723896 CEST	443	49729	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.732403994 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.732486010 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 17:03:59.732592106 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.732969999 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:03:59.733036995 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.324431896 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.325418949 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.325496912 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.326879978 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.326934099 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.346126080 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.347234964 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.347253084 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.348124027 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.348129034 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.374665976 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.375396967 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.375480890 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.376005888 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.376058102 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.398915052 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.399298906 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.399338007 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.399650097 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.399657965 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.456135035 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.456300974 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.456521988 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.456521988 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.456619978 CEST	49734	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.456657887 CEST	443	49734	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.459908009 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.459949017 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.460062981 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.460225105 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.460239887 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.475606918 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.475910902 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.475971937 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.475994110 CEST	49735	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.476007938 CEST	443	49735	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.479302883 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.479407072 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.479751110 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.479876041 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.479912043 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.513384104 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.513556004 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.513822079 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.513822079 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.513822079 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.516140938 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.516175032 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.516238928 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.516401052 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.516419888 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.521604061 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.522097111 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.522177935 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.522685051 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.522737026 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.556430101 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.556583881 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.556739092 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.556787014 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.556787014 CEST	49737	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.556807995 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.556824923 CEST	443	49737	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.559206963 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.559289932 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.559596062 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.559596062 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.559726954 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.706952095 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.707169056 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.707393885 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.707395077 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.707395077 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.709978104 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.710030079 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.710103035 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.710292101 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.710309029 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:00.824317932 CEST	49736	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:00.824378014 CEST	443	49736	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.014616966 CEST	49738	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.014677048 CEST	443	49738	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.196113110 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.214690924 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.217721939 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.217761040 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.221643925 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.221669912 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.239737988 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.239824057 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.240658998 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.240720034 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.280050993 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.282746077 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.282789946 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.284815073 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.284840107 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.289235115 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.290380955 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.290462971 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.291296959 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.291378975 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.347640038 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.347791910 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.347995043 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.348670006 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.348689079 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.348742962 CEST	49740	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.348751068 CEST	443	49740	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.353210926 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.353291988 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.354541063 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.355221987 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.355302095 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.366841078 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.366977930 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.367242098 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.367242098 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.367242098 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.370194912 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.370258093 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.370323896 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.370450020 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.370471954 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.417979002 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.418833017 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.418859959 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.418961048 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.418961048 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.419002056 CEST	49742	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.419008970 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.419018984 CEST	443	49742	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.419080019 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.419995070 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.419995070 CEST	49743	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.420059919 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.420124054 CEST	443	49743	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.425992966 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.426073074 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.426645041 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.426932096 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.426979065 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.428456068 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.428539038 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.428865910 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.428865910 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.428992987 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.456193924 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.456878901 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.456923008 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.457716942 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.457724094 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.670137882 CEST	49741	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.670198917 CEST	443	49741	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.783248901 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.783823013 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.783904076 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.784219980 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.784220934 CEST	49744	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.784255981 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.784284115 CEST	443	49744	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.790580034 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.790623903 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:01.790792942 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.791203976 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:01.791224957 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.094172001 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.094799995 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.094857931 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.095206976 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.095261097 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.105734110 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.106147051 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.106213093 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.106494904 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.106509924 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.153804064 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.154189110 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.154273987 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.154604912 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.154620886 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.167123079 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.167545080 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.167623997 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.167954922 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.167968988 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.225789070 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.225938082 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.226015091 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.226015091 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.226070881 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.226099014 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.230962038 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.231041908 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.231118917 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.231385946 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.231424093 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.235562086 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.235727072 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.235788107 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.235862017 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.235862017 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.235923052 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.235950947 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.240514040 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.240561008 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.240627050 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.246074915 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.246094942 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.282799006 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.282963991 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.283036947 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.283114910 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.283114910 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.283139944 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.283195019 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.285459995 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.285538912 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.285624027 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.285769939 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.285804033 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.570444107 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.570615053 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.570707083 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.585076094 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.585076094 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.585120916 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.585146904 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.606345892 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.606369972 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.606431007 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.608061075 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.608074903 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.702713966 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.705209970 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.705243111 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.706104040 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.706111908 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.753230095 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:02.753299952 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:02.753319979 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:02.753355980 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:02.753367901 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:02.753432035 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:02.753472090 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:02.753472090 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:02.800673008 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:02.807820082 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:02.807920933 CEST	443	49716	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:02.807981968 CEST	49716	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:02.810770988 CEST	49754	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:02.810853004 CEST	443	49754	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:02.810928106 CEST	49754	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:02.812483072 CEST	49754	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:02.812519073 CEST	443	49754	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:02.815211058 CEST	49755	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:02.815228939 CEST	443	49755	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:02.815279961 CEST	49755	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:02.815926075 CEST	49755	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:02.815939903 CEST	443	49755	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:02.831612110 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.831782103 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.831836939 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.832073927 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.832093000 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.837934971 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.838017941 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.838099003 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.838577986 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.838610888 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.960458994 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.961179972 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.961221933 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.961720943 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.961733103 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.997364998 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.997834921 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.997855902 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:02.998481035 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:02.998487949 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.089895964 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.090053082 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.090115070 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.090434074 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.090462923 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.090488911 CEST	49750	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.090504885 CEST	443	49750	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.095829964 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.095871925 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.095952034 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.096152067 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.096167088 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.127921104 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.128072023 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.128400087 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.128510952 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.128521919 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.128534079 CEST	49751	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.128539085 CEST	443	49751	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.131525040 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.131608963 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.131691933 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.132183075 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.132217884 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.290314913 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.291141033 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.291193962 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.292181015 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.292196989 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.356019974 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.356637001 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.356658936 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.357474089 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.357480049 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.418967009 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.419121027 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.419203997 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.420095921 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.420140982 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.420170069 CEST	49752	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.420190096 CEST	443	49752	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.428519011 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.428605080 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.428702116 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.429735899 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.429769039 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.488472939 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.488629103 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.488687992 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.488764048 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.488775969 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.488785028 CEST	49753	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.488789082 CEST	443	49753	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.490760088 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.490839958 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.491018057 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.491149902 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.491178036 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.603863001 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.604331017 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.604397058 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.604867935 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.604881048 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.739533901 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.739682913 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.739758968 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.739861012 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.739861965 CEST	49757	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.739907026 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.739937067 CEST	443	49757	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.742574930 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.742611885 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.742679119 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.742830992 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.742845058 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.945543051 CEST	443	49755	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:03.945986032 CEST	49755	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:03.946006060 CEST	443	49755	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:03.947263002 CEST	443	49755	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:03.948066950 CEST	49755	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:03.948242903 CEST	443	49755	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:03.948468924 CEST	49755	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:03.948518991 CEST	443	49755	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:03.949474096 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.949908972 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.949929953 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.950567961 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:03.950575113 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:03.955384970 CEST	443	49754	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:03.955804110 CEST	49754	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:03.955840111 CEST	443	49754	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:03.959398985 CEST	443	49754	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:03.959464073 CEST	49754	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:03.959486008 CEST	443	49754	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:03.959580898 CEST	49754	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:03.960273981 CEST	49754	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:03.960360050 CEST	443	49754	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:03.960822105 CEST	49754	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:03.960839987 CEST	443	49754	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:04.000765085 CEST	49754	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:04.114559889 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.114713907 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.114845037 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.114918947 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.114940882 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.114964962 CEST	49758	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.114970922 CEST	443	49758	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.118006945 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.118046999 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.118293047 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.118438959 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.118463039 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.275496006 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.276293993 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.276350975 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.276758909 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.276772022 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.279145002 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.279520988 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.279572964 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.279912949 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.279925108 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.407454967 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.407803059 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.407876968 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.407972097 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.407999039 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.408024073 CEST	49761	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.408040047 CEST	443	49761	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.410904884 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.411173105 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.411232948 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.411287069 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.411334038 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.411334038 CEST	49760	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.411353111 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.411364079 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.411365032 CEST	443	49760	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.411448956 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.411664009 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.411696911 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.413480997 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.413518906 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.413614035 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.413743019 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.413760900 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.488329887 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.488786936 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.488846064 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.489304066 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.489315987 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.618499994 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.618640900 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.618808985 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.618921995 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.618922949 CEST	49762	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.618971109 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.619007111 CEST	443	49762	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.621563911 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.621599913 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.621767998 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.621906996 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.621922970 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.704343081 CEST	443	49754	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:04.722877026 CEST	443	49755	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:04.722954035 CEST	443	49755	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:04.723126888 CEST	49755	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:04.723149061 CEST	443	49755	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:04.723223925 CEST	49755	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:04.725579977 CEST	49755	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:04.725655079 CEST	443	49755	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:04.725811958 CEST	49755	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:04.749212027 CEST	49754	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:04.749253988 CEST	443	49754	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:04.753259897 CEST	49754	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:04.753366947 CEST	443	49754	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:04.753525019 CEST	49754	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:04.757479906 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:04.757519007 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:04.757591963 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:04.757877111 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:04.757895947 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:04.772418022 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:04.772497892 CEST	443	49768	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:04.772572041 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:04.772953033 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:04.772989988 CEST	443	49768	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:04.882965088 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.898315907 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:04.935853958 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:04.959760904 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.005376101 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.005390882 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.005903006 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.005913973 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.006210089 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.006239891 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.006835938 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.006848097 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.132499933 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.132669926 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.132824898 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.135596037 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.136985064 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.137140989 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.139570951 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.153038025 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.153038025 CEST	49759	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.153120995 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.153120041 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.153152943 CEST	443	49759	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.153158903 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.153275013 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.153325081 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.153354883 CEST	49763	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.153389931 CEST	443	49763	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.153580904 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.153590918 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.158087969 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.158104897 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.158174992 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.158327103 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.158401966 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.158474922 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.158479929 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.158574104 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.158586979 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.158679962 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.158716917 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.158904076 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.158972979 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.159367085 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.159380913 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.277179003 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.277251005 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.277312040 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.277525902 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.277546883 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.277561903 CEST	49765	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.277570009 CEST	443	49765	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.281785965 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.281832933 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.281975985 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.282346964 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.282372952 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.289180994 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.289324999 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.289396048 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.290855885 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.290890932 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.290919065 CEST	49764	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.290934086 CEST	443	49764	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.293482065 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.293507099 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.293564081 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.293760061 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.293771982 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.373111963 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.373652935 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.373728037 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.374102116 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.374116898 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.504993916 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.505121946 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.505181074 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.505377054 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.505414009 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.505441904 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.505456924 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.508275986 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.508357048 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.508449078 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.508575916 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.508599043 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.871752024 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:05.872124910 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:05.872162104 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:05.875799894 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:05.875874043 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:05.875885010 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:05.875932932 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:05.876384020 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:05.876552105 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:05.876552105 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:05.876713037 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:05.889368057 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.889846087 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.889863968 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.890511990 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.890516996 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.897717953 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.898061991 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.898111105 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.898454905 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:05.898473024 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:05.898852110 CEST	443	49768	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:05.899086952 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:05.899132967 CEST	443	49768	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:05.902746916 CEST	443	49768	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:05.902817011 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:05.902837038 CEST	443	49768	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:05.902890921 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:05.903122902 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:05.903253078 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:05.903302908 CEST	443	49768	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:05.920558929 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:05.920567989 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:05.950906038 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:05.950937986 CEST	443	49768	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:05.966116905 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:06.003051043 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:06.015476942 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.015914917 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.015971899 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.016390085 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.016403913 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.016941071 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.017077923 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.017266035 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.017287016 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.017297029 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.017306089 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.017309904 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.019587994 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.019601107 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.019721985 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.019860983 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.019867897 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.028053999 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.028206110 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.028266907 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.028318882 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.028318882 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.028362036 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.028387070 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.030656099 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.030726910 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.030797005 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.030908108 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.030924082 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.043061018 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.043359995 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.043370008 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.043690920 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.043695927 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.155900002 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.156034946 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.156104088 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.156336069 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.156363964 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.156390905 CEST	49773	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.156405926 CEST	443	49773	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.159224033 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.159241915 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.159311056 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.159475088 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.159487009 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.175839901 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.175981045 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.176071882 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.176091909 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.176103115 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.176110029 CEST	49774	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.176114082 CEST	443	49774	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.177851915 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.177898884 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.177968025 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.178108931 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.178152084 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.247865915 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.248265982 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.248353958 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.249250889 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.249305010 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.394738913 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.395714998 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.395904064 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.395904064 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.395904064 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.398813963 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.398874998 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.398966074 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.399152040 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.399174929 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.619606972 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:06.619664907 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:06.619726896 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:06.619760036 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:06.619812965 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:06.621076107 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:06.621154070 CEST	443	49767	52.98.152.162	192.168.2.5
Oct 25, 2024 17:04:06.621222019 CEST	49767	443	192.168.2.5	52.98.152.162
Oct 25, 2024 17:04:06.631684065 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:06.631725073 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:06.631876945 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:06.632206917 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:06.632226944 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:06.661708117 CEST	443	49768	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:06.695780993 CEST	49775	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.695857048 CEST	443	49775	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.711499929 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:06.711524963 CEST	443	49768	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:06.712348938 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:06.712476015 CEST	443	49768	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:06.712786913 CEST	49768	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:06.760165930 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.760665894 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.760710001 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.761167049 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.761181116 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.789268017 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.789916039 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.789935112 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.790662050 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.790664911 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.887412071 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.887584925 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.887649059 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.887742996 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.887780905 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.887809038 CEST	49777	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.887830973 CEST	443	49777	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.890516043 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.890543938 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.890728951 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.891048908 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.891071081 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.905817986 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.906198025 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.906214952 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.906614065 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.906621933 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.924942017 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.925263882 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.925319910 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.925363064 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.925363064 CEST	49776	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.925373077 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.925380945 CEST	443	49776	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.927618027 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.927685022 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.927761078 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.927907944 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.927937984 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.933101892 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.933413029 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.933429003 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:06.933866978 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:06.933871984 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.047790051 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.047874928 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.047928095 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.051956892 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.051970959 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.051984072 CEST	49779	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.051990986 CEST	443	49779	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.055692911 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.055742979 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.055994034 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.056128025 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.056157112 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.069953918 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.070020914 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.070399046 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.071818113 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.071818113 CEST	49778	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.071827888 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.071835995 CEST	443	49778	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.079678059 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.079714060 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.079798937 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.080037117 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.080063105 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.139174938 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.140628099 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.140666962 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.141443014 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.141453981 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.273684978 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.273771048 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.273817062 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.281831980 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.281861067 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.281883001 CEST	49780	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.281893015 CEST	443	49780	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.606070995 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.606132030 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.606287003 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.609288931 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.609317064 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.644341946 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.645581007 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.645606041 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.646503925 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.646509886 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.664089918 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.677712917 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.677788019 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.678563118 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.678577900 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.758073092 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:07.758325100 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:07.758347988 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:07.759846926 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:07.759917021 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:07.759926081 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:07.759973049 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:07.760339022 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:07.760421991 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:07.760518074 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:07.760550976 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:07.774568081 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.774708033 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.774893999 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.774976015 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.774992943 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.775012970 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.775018930 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.777580023 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.777606964 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.777748108 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.777879953 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.777896881 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.793059111 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.793628931 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.793653965 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.794032097 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.794037104 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.801179886 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:07.801189899 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:07.803761959 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.803917885 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.803997040 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.804058075 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.804058075 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.804091930 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.804115057 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.806118965 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.806160927 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.806230068 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.806375980 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.806385040 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.811161995 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.811592102 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.811619997 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.812000036 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.812011957 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.848056078 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:07.924509048 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.924653053 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.924819946 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.924885035 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.924905062 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.924930096 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.924942970 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.928118944 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.928139925 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.928232908 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.928402901 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.928421974 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.941243887 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.941459894 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.941519976 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.941560030 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.941560030 CEST	49786	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.941580057 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.941601992 CEST	443	49786	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.943917990 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.943941116 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:07.944010019 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.944130898 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:07.944158077 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.344964027 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.345788956 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.345825911 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.350987911 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.351001978 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.477106094 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.477267027 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.477338076 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.477449894 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.477466106 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.477480888 CEST	49787	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.477494955 CEST	443	49787	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.480365038 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.480384111 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.480448961 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.480576038 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.480588913 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.514784098 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:08.514839888 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:08.514909029 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:08.514933109 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:08.515080929 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:08.516052961 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:08.516138077 CEST	443	49781	52.98.252.82	192.168.2.5
Oct 25, 2024 17:04:08.516252041 CEST	49781	443	192.168.2.5	52.98.252.82
Oct 25, 2024 17:04:08.527672052 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.528130054 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.528140068 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.528610945 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.528616905 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.558162928 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.558618069 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.558701992 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.558900118 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.558914900 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.661812067 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.662062883 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.662120104 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.662163019 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.662179947 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.662192106 CEST	49788	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.662198067 CEST	443	49788	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.664800882 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.664874077 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.665025949 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.665158987 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.665191889 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.675642967 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.676038027 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.676099062 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.676690102 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.676702976 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.687232018 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.687566996 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.687644005 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.688011885 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.688044071 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.690264940 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.690412045 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.690498114 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.690573931 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.690573931 CEST	49789	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.690617085 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.690644979 CEST	443	49789	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.697165966 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.697226048 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.697298050 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.697422028 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.697446108 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.816797972 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.816874027 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.817135096 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.817190886 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.817192078 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.817212105 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.817235947 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.819756031 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.819781065 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.819890022 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.820048094 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.820064068 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.829123974 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.829246998 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.829324007 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.829380989 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.829408884 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.829435110 CEST	49791	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.829448938 CEST	443	49791	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.831563950 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.831593990 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:08.831701994 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.831773043 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:08.831789970 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.216784000 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.217662096 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.217686892 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.219671011 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.219681978 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.346098900 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.346335888 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.346601963 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.346770048 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.346770048 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.346791029 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.346805096 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.349313021 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.349351883 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.349561930 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.349561930 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.349600077 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.422329903 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.423259974 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.423259974 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.423356056 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.423386097 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.437514067 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.438226938 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.438226938 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.438311100 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.438340902 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.551716089 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.551872015 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.552007914 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.552007914 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.552195072 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.552232981 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.554579020 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.554661989 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.554888010 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.554888964 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.554959059 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.567081928 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.567212105 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.567327023 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.567327023 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.567558050 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.567589998 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.569358110 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.569380999 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.569515944 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.569628000 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.569636106 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.572529078 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.572922945 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.572943926 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.573030949 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.573276043 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.573282003 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.573584080 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.573621988 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.574012995 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.574023962 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.702048063 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.702503920 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.702759981 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.702759981 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.703011036 CEST	49797	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.703030109 CEST	443	49797	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.703613997 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.703809023 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.704931021 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.705024958 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.705024958 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.705034971 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.705044985 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.705218077 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.705257893 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.705389023 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.705884933 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.705900908 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.708827019 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.708849907 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:09.712944984 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.713031054 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:09.713041067 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.082695007 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.083153963 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.083182096 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.083607912 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.083615065 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.212938070 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.213196993 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.213849068 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.213943005 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.213963032 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.213979006 CEST	49798	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.213985920 CEST	443	49798	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.219950914 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.219994068 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.220172882 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.220482111 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.220498085 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.285018921 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.285511971 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.285542011 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.286016941 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.286031961 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.310658932 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.311036110 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.311052084 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.311501980 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.311506033 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.413611889 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.413841963 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.413909912 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.414006948 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.414006948 CEST	49799	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.414030075 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.414051056 CEST	443	49799	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.416661024 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.416734934 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.416836023 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.416996956 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.417033911 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.440145016 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.440252066 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.440310001 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.440352917 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.440362930 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.440371990 CEST	49800	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.440376043 CEST	443	49800	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.442585945 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.442615986 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.442687035 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.442807913 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.442819118 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.443281889 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.443635941 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.443659067 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.444042921 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.444046974 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.448213100 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.448518038 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.448527098 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.448903084 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.448908091 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.572248936 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.572443008 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.572510958 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.572546959 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.572562933 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.572571993 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.572577953 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.575084925 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.575124025 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.575265884 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.575438023 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.575475931 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.582885027 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.583268881 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.583329916 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.583353043 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.583359957 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.583369017 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.583373070 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.585388899 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.585431099 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.585498095 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.585618973 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.585630894 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.959230900 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.959723949 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.959741116 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:10.960151911 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:10.960156918 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.089452982 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.089602947 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.089709997 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.089709997 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.089764118 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.089776993 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.092005968 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.092022896 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.092087030 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.092210054 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.092215061 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.163976908 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.164391994 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.164414883 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.164808989 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.164814949 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.168061018 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.168684006 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.168684006 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.168716908 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.168751955 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.296205044 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.296416044 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.296587944 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.296674013 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.296674013 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.296700001 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.296710968 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.299233913 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.299261093 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.299443960 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.299490929 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.299495935 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.306606054 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.306742907 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.306875944 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.306875944 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.306961060 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.307001114 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.307780027 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.308190107 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.308206081 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.308659077 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.308670044 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.309056997 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.309082031 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.309290886 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.309314966 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.309319019 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.352061987 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.352613926 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.352631092 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.353110075 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.353125095 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.436938047 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.437096119 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.437256098 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.437318087 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.437318087 CEST	49806	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.437339067 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.437360048 CEST	443	49806	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.440819979 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.440828085 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.444937944 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.445173025 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.445183992 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.488778114 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.489306927 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.489411116 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.489411116 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.489445925 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.489459038 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.491667986 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.491698980 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.491849899 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.491895914 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.491923094 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.840850115 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.841413975 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.841433048 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.844820976 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.844829082 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.974272013 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.974436998 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.974539995 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.977551937 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.977579117 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:11.977591991 CEST	49808	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:11.977601051 CEST	443	49808	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.010560036 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.010641098 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.010744095 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.013803959 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.013840914 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.030956030 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.036758900 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.036776066 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.040190935 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.040196896 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.044733047 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.046813965 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.046828032 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.049990892 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.049997091 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.165157080 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.165359020 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.165498972 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.165587902 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.165587902 CEST	49809	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.165597916 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.165604115 CEST	443	49809	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.168260098 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.168298960 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.168411970 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.168546915 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.168560982 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.175034046 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.175093889 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.175228119 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.175230026 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.175278902 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.175331116 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.175352097 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.175364971 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.175371885 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.177469969 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.177503109 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.177721977 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.177865028 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.177894115 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.193919897 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.194276094 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.194289923 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.194809914 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.194814920 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.227699995 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.228243113 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.228251934 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.228437901 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.228451967 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.324800014 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.324956894 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.325078964 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.325155020 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.325162888 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.325212955 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.325217009 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.328094959 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.328185081 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.328274012 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.328413010 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.328445911 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.358659983 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.358902931 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.358974934 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.359014988 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.359015942 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.359025955 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.359030008 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.361216068 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.361244917 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.361358881 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.361506939 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.361521959 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.779505968 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.780009031 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.780059099 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.781394005 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.781407118 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.900135040 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.900604963 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.900625944 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.901041985 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.901052952 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.907712936 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.907736063 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.907797098 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.907819986 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.907897949 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.907963037 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.908026934 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.908026934 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.908056974 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.908078909 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.910587072 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.910629034 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.910700083 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.910861015 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.910878897 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.917193890 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.917530060 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.917543888 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:12.917932034 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:12.917937994 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.031672955 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.031733990 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.031799078 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.031817913 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.031897068 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.031963110 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.032018900 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.032032013 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.032059908 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.032073021 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.034588099 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.034630060 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.034713030 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.034826994 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.034843922 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.052983046 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.053009033 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.053061008 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.053062916 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.053102016 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.053256035 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.053256035 CEST	49814	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.053267956 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.053276062 CEST	443	49814	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.055210114 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.055291891 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.055373907 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.055486917 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.055522919 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.076030016 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.076514006 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.076602936 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.076797962 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.076812029 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.096708059 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.097240925 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.097278118 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.097660065 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.097671986 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.206780910 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.206958055 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.207156897 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.207156897 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.207158089 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.209873915 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.209903002 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.210005999 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.210165977 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.210174084 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.225414991 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.225580931 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.225688934 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.225738049 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.225738049 CEST	49817	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.225764990 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.225795031 CEST	443	49817	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.227900028 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.227916956 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.227977037 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.228101015 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.228116035 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.515130043 CEST	49816	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.515213013 CEST	443	49816	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.658148050 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.658684969 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.658742905 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.659070015 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.659084082 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.778743029 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.779205084 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.779251099 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.779607058 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.779619932 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.787513018 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.787854910 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.787888050 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.788292885 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.788306952 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.789900064 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.790221930 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.790359020 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.790440083 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.790440083 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.790486097 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.790512085 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.792922020 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.792942047 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.793013096 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.793154955 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.793171883 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.911535978 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.911600113 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.911664963 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.911854029 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.911875963 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.911926031 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.911942005 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.914645910 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.914688110 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.914856911 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.915007114 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.915023088 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.918323040 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.918395042 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.918520927 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.918597937 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.918597937 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.918627024 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.918642044 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.920424938 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.920444012 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.920624018 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.920624018 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.920645952 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.945076942 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.945405960 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.945426941 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.945780039 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.945786953 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.974965096 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.975636959 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.975636959 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:13.975677967 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:13.975699902 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.076875925 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.076951981 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.077065945 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.077142954 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.077161074 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.077193022 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.077200890 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.079180002 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.079200983 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.079354048 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.079456091 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.079463005 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.106102943 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.106275082 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.106416941 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.106416941 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.106416941 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.108669043 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.108690977 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.109005928 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.109006882 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.109035015 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.421529055 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.421590090 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.545969963 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.546530962 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.546550989 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.548835993 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.548842907 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.643234015 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.644188881 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.644188881 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.644203901 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.644217014 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.645509005 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.646199942 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.646199942 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.646215916 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.646234989 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.771940947 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.772092104 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.772897005 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.772897005 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.772952080 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.772962093 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.775836945 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.775887012 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.776119947 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.776119947 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.776165009 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.778085947 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.778171062 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.778453112 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.778563023 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.778563023 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.778583050 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.778597116 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.781259060 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.781339884 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.781507969 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.781601906 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.781626940 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.817030907 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.817991972 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.817991972 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.818015099 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.818053961 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.838139057 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.838299990 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.838573933 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.838573933 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.838613033 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.838625908 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.841188908 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.841224909 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.841403008 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.841579914 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.841599941 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.858952999 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.859347105 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.859359026 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.860831976 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.860836983 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.946849108 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.946913004 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.947010994 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.947037935 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.947179079 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.947280884 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.947280884 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.947304010 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.947323084 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.952843904 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.952879906 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.957025051 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.957125902 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.957142115 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.989372015 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.989525080 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.989645004 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.989716053 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.989725113 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.989754915 CEST	49827	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.989759922 CEST	443	49827	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.992233992 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.992280960 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:14.992479086 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.992680073 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:14.992697001 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.054579020 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.054743052 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.055136919 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.055150032 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.055680990 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.055757046 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.055819035 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.055828094 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.056317091 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.056333065 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.058752060 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.059204102 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.059210062 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.059273005 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.059664011 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.059684038 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.059854984 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.059859037 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.060367107 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.060380936 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.063344955 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.063743114 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.063760996 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.064296007 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.064306974 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.185405970 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.185570955 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.185791016 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.185843945 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.185878992 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.185908079 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.185924053 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.188074112 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.188282967 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.188644886 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.189804077 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.189821005 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.189834118 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.189841032 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.191802979 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.191871881 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.192023993 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.195120096 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.195169926 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.195249081 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.195436954 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.195472956 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.195827961 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.195858002 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.197886944 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.197957993 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.198076963 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.198144913 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.198399067 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.198417902 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.198440075 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.198452950 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.200284004 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.200442076 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.200565100 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.200833082 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.200849056 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.204569101 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.204593897 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.204709053 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.204878092 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.204905033 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.205595970 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.205602884 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.205936909 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.206101894 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.206114054 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.229866982 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.229904890 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.229962111 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.230006933 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.230056047 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.230149031 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.230165005 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.230178118 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.230186939 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.233093023 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.233175993 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.233273029 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.233469963 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.233505964 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.931015015 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.931585073 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.931662083 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.932297945 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.932311058 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.936219931 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.937122107 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.937181950 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.938308954 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.938324928 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.952040911 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.952600002 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.952615023 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.953206062 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.953217030 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.956640959 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.957097054 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.957134008 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.957654953 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.957667112 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.963162899 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.963577032 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.963583946 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:16.964102030 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:16.964104891 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.062041044 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.062195063 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.062293053 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.062422037 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.062447071 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.062472105 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.062484980 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.065718889 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.065762043 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.066087008 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.066236019 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.066251993 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.068932056 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.069035053 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.069107056 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.069248915 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.069248915 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.069271088 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.069292068 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.072237968 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.072252035 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.072319984 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.072506905 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.072519064 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.083172083 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.083333015 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.083415985 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.083436012 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.083482981 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.083537102 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.083564997 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.083589077 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.083600998 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.086227894 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.086266041 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.086353064 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.086535931 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.086563110 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.087342024 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.087615967 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.087694883 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.087744951 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.087764978 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.087790012 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.087820053 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.090353966 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.090374947 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.090457916 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.090600967 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.090625048 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.093168974 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.093257904 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.093385935 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.093467951 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.093472004 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.093480110 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.093482971 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.096122026 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.096139908 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.096225023 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.096374989 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.096400023 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.807704926 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.808250904 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.808286905 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.808921099 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.808934927 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.816441059 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.816823959 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.816845894 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.817399979 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.817405939 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.831357956 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.831717968 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.831733942 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.832170010 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.832180977 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.836253881 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.836606026 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.836621046 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.837167025 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.837177992 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.840361118 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.840768099 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.840779066 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.841201067 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.841207027 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.940602064 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.940635920 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.940684080 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.940694094 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.940761089 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.940952063 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.940952063 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.940980911 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.941006899 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.944149971 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.944195032 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.944262028 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.944442034 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.944458008 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.945550919 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.945708036 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.945755959 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.945878029 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.945885897 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.945894957 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.945899010 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.948271036 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.948277950 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.948347092 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.948499918 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.948512077 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.961289883 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.961318016 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.961364031 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.961371899 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.961417913 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.967931986 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.967931986 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.967950106 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.967969894 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.972210884 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.972388983 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.972487926 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.974817991 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.974975109 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.975049973 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.975285053 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.975343943 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.975382090 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.975398064 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.975464106 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.975476027 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.975512981 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.975524902 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.978532076 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.978559971 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.978646994 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.979269981 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.979290009 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.979408026 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.979430914 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.979434967 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.979789019 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.979803085 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.980834961 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.980855942 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:17.980942965 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.981112957 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:17.981137991 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.671629906 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.701585054 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.709086895 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.713501930 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.717194080 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.718843937 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.718858004 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.726224899 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.726231098 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.727790117 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.733644962 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.733666897 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.733983040 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.733989000 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.737945080 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.738004923 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.743761063 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.743776083 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.744498968 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.744513988 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.745220900 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.745230913 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.745668888 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.745683908 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.746310949 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.746315956 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.852726936 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.852891922 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.853018045 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.853116035 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.853116035 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.853156090 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.853180885 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.856995106 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.857013941 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.857079983 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.857275009 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.857286930 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.862273932 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.862360001 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.862416983 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.862646103 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.862651110 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.862658978 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.862662077 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.865356922 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.865376949 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.865453005 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.865602016 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.865613937 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.870618105 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.870682001 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.870740891 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.870812893 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.870908022 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.870908022 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.870949984 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.870978117 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.872051954 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.872203112 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.872401953 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.872457981 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.872462988 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.872469902 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.872473001 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.873253107 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.873395920 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.873466969 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.873567104 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.873604059 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.873641968 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.873656988 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.873943090 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.873951912 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.874006033 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.874138117 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.874150991 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.875643969 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.875654936 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.875765085 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.875893116 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.875905991 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.876040936 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.876072884 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:18.876138926 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.876230001 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:18.876245022 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.601998091 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.602569103 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.611670971 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.611696959 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.612127066 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.612133026 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.612536907 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.612564087 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.612915993 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.612921000 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.617585897 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.618467093 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.618474007 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.618942976 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.618947029 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.621321917 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.621705055 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.621716976 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.622140884 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.622144938 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.675296068 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.676039934 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.676125050 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.676343918 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.676359892 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.738670111 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.738962889 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.739048004 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.739104986 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.739104986 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.739151001 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.739177942 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.739212036 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.739383936 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.739448071 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.739509106 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.739521027 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.739533901 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.739540100 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.742249012 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.742295027 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.742434025 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.742490053 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.742533922 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.742635012 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.742655993 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.742674112 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.742788076 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.742809057 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.751832008 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.751913071 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.751991034 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.752063990 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.752063990 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.752080917 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.752099991 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.754352093 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.754368067 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.754434109 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.754549026 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.754561901 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.755403042 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.755731106 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.755819082 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.755827904 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.755846977 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.755896091 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.755927086 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.755932093 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.755940914 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.755944967 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.757896900 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.757908106 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.757970095 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.758102894 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.758116007 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.809834957 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.810004950 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.810132027 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.810175896 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.810175896 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.810194969 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.810209036 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.813123941 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.813170910 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:19.813245058 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.813405037 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:19.813436985 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.495268106 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.495965004 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.495980978 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.496721029 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.496726036 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.502043009 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.502696991 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.502753973 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.508059025 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.508075953 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.534559011 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.534982920 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.534993887 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.535393000 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.535399914 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.547028065 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.547441959 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.547451019 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.547823906 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.547830105 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.551875114 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.552194118 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.552238941 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.552567959 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.552580118 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.638439894 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.638623953 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.638811111 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.638811111 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.638811111 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.641284943 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.641336918 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.641411066 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.641542912 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.641551018 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.656825066 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.656898022 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.656950951 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.656972885 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.657007933 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.657061100 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.657176018 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.657186985 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.657205105 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.657212019 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.659394979 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.659459114 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.659717083 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.659784079 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.659801006 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.683945894 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.684004068 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.684078932 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.684091091 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.684169054 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.684175968 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.684181929 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.684222937 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.684254885 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.684268951 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.684298992 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.684330940 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.684330940 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.684333086 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.684345961 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.684349060 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.684356928 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.686516047 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.686534882 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.686845064 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.686930895 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.686958075 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.686968088 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.686973095 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.687022924 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.687335968 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.687346935 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.687695026 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.687838078 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.687952042 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.687952995 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.687984943 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.687990904 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.689928055 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.689935923 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.690104008 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.690254927 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.690263987 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:20.952502012 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:20.952564955 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.732425928 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.732455015 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.733001947 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.733016968 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.733037949 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.733061075 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.733596087 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.733603954 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.733705997 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.733726978 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.737967014 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.738023043 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.738287926 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.738328934 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.738481998 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.738497972 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.738871098 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.738881111 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.738899946 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.738905907 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.861550093 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.861718893 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.861939907 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.862011909 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.862011909 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.862046957 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.862068892 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.862680912 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.862723112 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.862778902 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.862782955 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.862822056 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.863071918 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.863094091 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.863106966 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.863115072 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.864991903 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.864999056 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.865019083 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.865040064 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.865093946 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.865135908 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.865331888 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.865353107 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.865359068 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.865370035 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.867856026 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.867943048 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.868030071 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.868058920 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.868081093 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.868127108 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.868128061 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.868151903 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.868174076 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.868185997 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.868194103 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.868341923 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.868393898 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.868408918 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.868452072 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.868480921 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.868480921 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.868499994 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.868513107 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.868518114 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.870527029 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.870553017 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.870626926 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.870647907 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.870670080 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.870738983 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.870790005 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.870801926 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:21.870927095 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:21.870956898 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.317456007 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.321000099 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.321024895 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.321571112 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.321576118 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.456535101 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.456748009 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.456816912 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.456907034 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.456918955 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.456929922 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.456934929 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.459688902 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.459708929 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.459793091 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.459925890 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.459935904 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.599026918 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.599709034 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.599746943 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.600111008 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.600117922 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.601403952 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.601787090 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.601849079 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.602169037 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.602181911 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.619191885 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.619537115 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.619569063 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.619785070 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.619936943 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.619949102 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.620099068 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.620109081 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.620588064 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.620592117 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.728959084 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.729129076 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.729204893 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.729661942 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.729661942 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.729680061 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.729690075 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.732321978 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.732523918 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.732722044 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.733082056 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.733114958 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.733144045 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.733164072 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.739531994 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.739574909 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.739664078 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.740669012 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.740699053 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.740813971 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.741064072 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.741077900 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.741508961 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.741523027 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.751950979 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.752018929 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.752094030 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.752116919 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.752146959 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.752280951 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.752659082 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.752681017 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.752706051 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.752717972 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.753856897 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.754710913 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.754770041 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.754800081 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.754806995 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.754812956 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.754817009 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.757196903 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.757236004 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.757371902 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.757477045 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.757498980 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.757858992 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.757875919 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:22.757962942 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.758080006 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:22.758090019 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.189367056 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.189852953 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.189883947 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.190310001 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.190319061 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.319165945 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.319279909 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.319482088 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.319654942 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.319679022 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.319691896 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.319700003 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.322913885 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.322938919 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.323086977 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.323410988 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.323427916 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.479130983 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.479639053 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.479670048 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.480202913 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.480209112 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.501905918 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.502284050 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.502311945 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.502810955 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.502818108 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.510387897 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.510885954 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.510972977 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.514328003 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.514343977 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.609901905 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.610086918 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.610177994 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.612601042 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.612621069 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.612634897 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.612643003 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.633404970 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.633564949 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.633641005 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.644294977 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.644464970 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.644546986 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.649230003 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.649305105 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.649317980 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.649317980 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.649328947 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.649339914 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.649409056 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.652179003 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.652213097 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.664165974 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.664165974 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.664211988 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.664237022 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.693428993 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.693463087 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.693566084 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.707135916 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.707205057 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.707254887 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.707273006 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:23.707293034 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.708004951 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:23.708040953 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.068562031 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.069037914 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.069081068 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.069559097 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.069566011 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.200807095 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.201426983 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.201476097 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.201503038 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.201545000 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.201587915 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.201622009 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.201622009 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.201642036 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.201652050 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.204492092 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.204543114 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.204631090 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.204798937 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.204818010 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.417896986 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.418438911 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.418500900 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.418931007 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.418943882 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.449029922 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.449548960 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.449585915 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.450088978 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.450095892 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.459229946 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.459629059 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.459665060 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.460211039 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.460225105 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.552670002 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.552848101 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.552932978 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.553020954 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.553020954 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.553065062 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.553092957 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.556103945 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.556193113 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.556488037 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.556598902 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.556628942 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.582345009 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.582382917 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.582439899 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.582448006 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.582479000 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.582617044 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.582638979 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.582653999 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.582660913 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.585294008 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.585334063 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.585397959 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.585583925 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.585599899 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.599543095 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.599698067 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.599803925 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.599803925 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.599803925 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.602418900 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.602504969 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.602593899 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.602730036 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.602758884 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:24.905148029 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:24.905200958 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.142787933 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.143444061 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.143482924 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.144000053 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.144006968 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.274923086 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.275049925 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.275186062 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.275425911 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.275425911 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.275443077 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.275451899 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.278548956 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.278600931 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.279090881 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.279090881 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.279143095 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.295875072 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.296627998 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.296664953 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.297544956 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.297552109 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.315406084 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.315898895 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.315926075 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.316513062 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.316519022 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.350286961 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.350939989 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.350971937 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.351344109 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.351351023 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.425893068 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.426033974 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.426136971 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.426244974 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.426244974 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.426266909 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.426279068 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.429280996 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.429321051 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.429477930 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.429524899 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.429532051 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.445154905 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.445348978 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.445553064 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.445612907 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.445612907 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.445627928 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.445636988 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.448663950 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.448702097 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.448868990 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.452879906 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.452913046 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.491750956 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.491995096 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.492108107 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.492108107 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.492168903 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.492197990 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.494687080 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.494715929 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:25.494882107 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.495033979 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:25.495049953 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.026216984 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.026729107 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.026746035 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.027211905 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.027218103 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.158905029 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.158968925 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.159049034 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.159286976 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.159310102 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.159327984 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.159332991 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.162265062 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.162317991 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.162421942 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.162589073 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.162606001 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.179577112 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.180125952 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.180145979 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.180708885 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.180717945 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.199619055 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.199939013 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.199954987 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.200560093 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.200565100 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.244652033 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.245018959 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.245028019 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.245647907 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.245654106 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.311513901 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.311664104 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.311743975 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.311814070 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.311837912 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.311881065 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.311887980 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.314759970 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.314796925 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.314898014 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.315035105 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.315042019 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.331645012 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.331711054 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.331765890 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.331799030 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.331823111 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.331890106 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.331995964 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.332015038 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.332020998 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.332026958 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.335067987 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.335093021 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.335211039 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.335361958 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.335377932 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.529925108 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.530000925 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.530141115 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.530271053 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.530271053 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.530287981 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.530292988 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.533432007 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.533459902 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.533608913 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.533740997 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.533751011 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.894603014 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.895131111 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.895173073 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:26.895755053 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:26.895761967 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.024631977 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.024863958 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.025048018 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.025099039 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.025120974 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.025137901 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.025146008 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.028073072 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.028125048 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.028189898 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.028340101 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.028358936 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.049829960 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.050214052 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.050231934 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.050806046 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.050813913 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.067470074 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.067965031 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.067976952 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.068623066 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.068629026 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.190721035 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.190824032 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.190884113 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.191025972 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.191042900 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.191054106 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.191059113 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.193922997 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.193974018 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.194082975 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.194226027 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.194236040 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.196917057 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.196943998 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.197000027 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.197004080 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.197071075 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.197215080 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.197237968 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.197252989 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.197259903 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.199701071 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.199724913 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.199791908 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.199958086 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.199973106 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.284593105 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.285052061 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.285067081 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.285598040 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.285603046 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.786115885 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.786194086 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.786256075 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.786273003 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.786313057 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.786365032 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.786526918 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.786542892 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.786555052 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.786560059 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.789702892 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.789747953 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.789844990 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.790013075 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.790029049 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.791261911 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.791709900 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.791743994 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.792179108 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.792186022 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.923114061 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.923270941 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.923324108 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.923392057 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.923685074 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.923695087 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.923706055 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.923711061 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.926372051 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.926402092 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.926480055 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.926608086 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.926624060 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.937561989 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.938024044 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.938044071 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.938652039 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.938657999 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.948106050 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.948457003 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.948467970 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:27.948975086 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:27.948982000 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.068176985 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.068346977 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.071885109 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.081130981 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.081173897 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.081233978 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.081269979 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.083887100 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.100297928 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.100297928 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.100316048 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.100327015 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.103168011 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.103183031 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.103233099 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.103240967 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.105989933 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.106112957 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.107877970 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.107902050 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.107943058 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.108278990 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.108488083 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.108499050 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.108509064 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.108540058 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.518798113 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.519757032 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.519757032 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.519792080 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.519819021 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.646864891 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.646954060 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.647207975 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.647207975 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.647207975 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.649786949 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.649837971 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.649962902 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.650118113 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.650135040 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.701237917 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.702092886 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.702092886 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.702111006 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.702126980 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.838666916 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.838725090 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.838911057 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.838949919 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.839021921 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.839021921 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.839062929 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.839078903 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.839252949 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.841273069 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.841284037 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.841821909 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.841825962 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.841825008 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.841876030 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.842021942 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.842261076 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.842283010 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.842366934 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.843038082 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.843038082 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.843060970 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.843084097 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.952876091 CEST	49891	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.952910900 CEST	443	49891	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.969959021 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.970040083 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.970139027 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.970176935 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.970309019 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.970866919 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.970921993 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.970988035 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.971020937 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.971303940 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.979299068 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.979319096 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.979382992 CEST	49894	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.979392052 CEST	443	49894	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.979713917 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.979762077 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.979794979 CEST	49893	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.979809999 CEST	443	49893	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.983848095 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.983886957 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.983982086 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.984236956 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.984273911 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.984334946 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.984460115 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.984472990 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:28.984534025 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:28.984555006 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.612552881 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.613042116 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.613070965 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.613543987 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.613552094 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.710094929 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.710757971 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.710783958 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.711399078 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.711402893 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.718050957 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.718868017 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.718885899 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.719568968 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.719574928 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.751291990 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.751470089 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.751616001 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.754862070 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.754882097 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.758275032 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.758305073 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.758379936 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.758550882 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.758564949 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.840265989 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.840641022 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.840713978 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.840842962 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.840862036 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.840893984 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.840899944 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.844461918 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.844494104 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.844868898 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.845320940 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.845334053 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.848870039 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.848900080 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.848944902 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.848997116 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.848997116 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.849245071 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.849265099 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.849348068 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.849354982 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.852699041 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.852730036 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:29.852830887 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.852973938 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:29.852982998 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.494601965 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.495258093 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.495276928 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.495987892 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.496006012 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.576559067 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.577012062 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.577024937 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.577699900 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.577707052 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.626205921 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.626648903 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.626671076 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.627203941 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.627206087 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.627214909 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.627271891 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.627393961 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.627475023 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.627487898 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.627511978 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.627518892 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.631175041 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.631194115 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.631268024 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.631479025 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.631493092 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.705013037 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.705452919 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.705532074 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.705559969 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.705574989 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.705585003 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.705590963 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.708893061 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.708915949 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.708992004 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.709122896 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.709137917 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.763139009 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.763178110 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.763226032 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.763232946 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.763278961 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.763345003 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.763355017 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.763364077 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.763369083 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.765742064 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.765777111 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:30.765855074 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.766107082 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:30.766123056 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.370527029 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.371093988 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.371134996 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.371552944 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.371558905 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.454155922 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.454813004 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.454849958 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.455275059 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.455291033 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.497389078 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.497955084 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.497973919 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.498400927 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.498408079 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.503129959 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.503160000 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.503210068 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.503217936 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.503285885 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.503568888 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.503592014 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.503602982 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.503609896 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.506894112 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.506938934 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.507080078 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.507282972 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.507292986 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.585192919 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.585269928 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.585334063 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.585721016 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.585743904 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.585760117 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.585767031 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.588579893 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.588618040 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.588948011 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.589071989 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.589088917 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.634560108 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.634727001 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.634825945 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.634974957 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.635008097 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.635020018 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.635026932 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.637767076 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.637800932 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.637898922 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.638001919 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.638010025 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.920099020 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.920676947 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.920707941 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:31.921322107 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:31.921328068 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.241292000 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.242305040 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.242305040 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.242321968 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.242331982 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.321820021 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.322360039 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.322395086 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.323187113 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.323195934 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.394908905 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.395004988 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.395399094 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.395399094 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.395528078 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.395540953 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.400913954 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.400966883 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.405145884 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.405145884 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.405179977 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.414706945 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.425822973 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.425842047 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.426455021 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.426460028 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.453016043 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.453078032 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.457179070 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.457179070 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.460798025 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.460820913 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.460877895 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.460932016 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.465116024 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.465116024 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.465157032 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.504684925 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.504827023 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.504878044 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.504981995 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.504981995 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.505127907 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.505141020 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.505166054 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.505176067 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.508341074 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.508378029 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.508656979 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.508656979 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.508682966 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.562156916 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.564184904 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.564305067 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.564306021 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.564886093 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.564904928 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.567625999 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.567682028 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:32.567920923 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.568030119 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:32.568051100 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.209899902 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.210448980 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.210469007 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.210928917 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.210936069 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.301573992 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.302104950 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.302124023 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.302649021 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.302654982 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.342991114 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.343051910 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.343178988 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.343303919 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.343331099 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.343347073 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.343354940 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.346574068 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.346667051 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.346796036 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.346961975 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.346997976 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.432882071 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.432995081 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.433078051 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.433451891 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.433480978 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.433494091 CEST	49911	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.433502913 CEST	443	49911	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.438453913 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.438505888 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.438730955 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.438899994 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.438915014 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.461400032 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.461865902 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.461883068 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.462318897 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.462325096 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.593549013 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.593617916 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.593724966 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.593738079 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.593780994 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.593915939 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.593935013 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.593944073 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.593950033 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.596956968 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.597011089 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.597073078 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.597250938 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.597269058 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.918596029 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.919142962 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.919161081 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:33.919764996 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:33.919770002 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.057544947 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.057580948 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.057641029 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.057670116 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.057718039 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.057962894 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.057981968 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.058011055 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.058017969 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.061132908 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.061182022 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.061429024 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.061718941 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.061733007 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.094290972 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.095344067 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.095344067 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.095376015 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.095395088 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.345055103 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.346155882 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.346155882 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.346196890 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.346216917 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.467227936 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.467341900 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.467387915 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.467554092 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.467605114 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.467605114 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.467629910 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.467647076 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.471131086 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.471208096 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.471457005 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.471457005 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.471520901 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.479026079 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.479095936 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.479212999 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.479367971 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.479367971 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.479383945 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.479393005 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.484894991 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.484937906 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.488984108 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.489696026 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.489712000 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.802218914 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.803051949 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.803076982 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.803724051 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.803728104 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.933100939 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.933247089 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.933374882 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.933374882 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.933414936 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.933437109 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.936106920 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.936203957 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:34.936424971 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.936523914 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:34.936544895 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.212685108 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.213217974 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.213280916 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.213821888 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.213838100 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.220892906 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.222805977 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.222827911 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.223483086 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.223490953 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.345537901 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.345563889 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.345616102 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.345619917 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.345658064 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.345896959 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.345920086 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.345935106 CEST	49916	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.345942974 CEST	443	49916	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.348902941 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.348937035 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.349126101 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.349313021 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.349323034 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.359678984 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.359704018 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.359760046 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.359780073 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.359795094 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.359833002 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.360028028 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.360038042 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.360049963 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.360055923 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.362682104 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.362720966 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.362780094 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.362927914 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.362941980 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.676780939 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.677350998 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.677371979 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.678002119 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.678009033 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.808449030 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.808497906 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.808581114 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.808607101 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.808628082 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.808681011 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.808855057 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.808871031 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.808885098 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.808892965 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.812096119 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.812153101 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:35.812485933 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.812767982 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:35.812798977 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.084443092 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.084948063 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.084973097 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.085536003 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.085541964 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.096935987 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.097450972 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.097470045 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.098108053 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.098114014 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.218585014 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.218647957 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.218841076 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.218875885 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.218894005 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.218899965 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.218905926 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.221607924 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.221693993 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.221972942 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.222137928 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.222170115 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.229723930 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.229763985 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.229810953 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.229856014 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.229984999 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.229984999 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.230001926 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.230010986 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.232171059 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.232202053 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.232394934 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.232551098 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.232564926 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.563873053 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.564594984 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.564610958 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.565337896 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.565344095 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.697179079 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.697320938 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.697412968 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.697555065 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.697582960 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.697612047 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.697627068 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.701687098 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.701728106 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.701808929 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.702146053 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.702157974 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.969033957 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.969582081 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.969605923 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.969944954 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.969952106 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.975164890 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.975491047 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.975506067 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:36.975959063 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:36.975963116 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.102005959 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.102058887 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.102121115 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.102188110 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.102392912 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.102435112 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.102463961 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.102480888 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.105361938 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.105400085 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.105463982 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.105611086 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.105619907 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.111556053 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.111651897 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.111701965 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.111804962 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.111814022 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.111835957 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.111840010 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.114227057 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.114269018 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.114530087 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.114530087 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.114567041 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.479140997 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.479649067 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.479669094 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.480098009 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.480103016 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.682045937 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.682113886 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.682173014 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.682182074 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.682240009 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.682322025 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.682584047 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.682598114 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.682605982 CEST	49925	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.682610989 CEST	443	49925	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.685389042 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.685432911 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.685595036 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.685758114 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.685777903 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.997282982 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.997980118 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.998007059 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.998068094 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.998274088 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.998280048 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.998648882 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.998666048 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:37.999032021 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:37.999037027 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.128804922 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.128869057 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.129003048 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.129218102 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.129218102 CEST	49926	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.129245043 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.129259109 CEST	443	49926	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.131798029 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.131840944 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.132394075 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.132680893 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.132694960 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.135014057 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.135050058 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.135102987 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.135132074 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.135159969 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.135278940 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.135278940 CEST	49927	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.135297060 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.135307074 CEST	443	49927	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.137547016 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.137593985 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.137965918 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.138130903 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.138153076 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.430016994 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.430877924 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.430923939 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.432920933 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.432929039 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.561671019 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.561841011 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.562000990 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.562000990 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.562077999 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.562102079 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.564805984 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.564848900 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.565017939 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.565084934 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.565090895 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.870028019 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.870950937 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.870951891 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.870999098 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.871017933 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.875550985 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.876003981 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.876019955 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.876238108 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.876241922 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.999320030 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.999496937 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.999558926 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.999571085 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.999619961 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.999649048 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.999649048 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:38.999675035 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:38.999687910 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.005125999 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.005179882 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.005250931 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.006040096 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.006062984 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.006073952 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.006081104 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.007344961 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.007443905 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.007518053 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.007662058 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.007688046 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.008349895 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.008388042 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.008948088 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.009059906 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.009068012 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.314357996 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.321177006 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.321187973 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.324120998 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.324125051 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.453696966 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.453883886 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.453959942 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.462490082 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.462511063 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.465449095 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.465548038 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.465637922 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.465820074 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.465856075 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.767492056 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.767872095 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.767888069 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.768347025 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.768352032 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.787023067 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.787481070 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.787540913 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.787923098 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.787942886 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.899173021 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.899209023 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.899257898 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.899269104 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.899311066 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.899460077 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.899475098 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.899483919 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.899490118 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.902165890 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.902187109 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.902246952 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.902365923 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.902374029 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.924479008 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.924547911 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.924673080 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.924736977 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.924736977 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.924777031 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.924799919 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.926981926 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.927005053 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:39.927087069 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.927246094 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:39.927259922 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.198659897 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.199255943 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.199289083 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.199734926 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.199748039 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.330091000 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.330245018 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.330426931 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.330476999 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.330509901 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.330535889 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.330553055 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.333225965 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.333244085 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.333425999 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.333626032 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.333630085 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.650038958 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.650593042 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.650625944 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.651086092 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.651093960 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.673130035 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.673455000 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.673470020 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.673857927 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.673863888 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.779660940 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.779767990 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.779823065 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.779982090 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.779998064 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.780014038 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.780020952 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.784864902 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.784890890 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.785003901 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.785187006 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.785200119 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.812644958 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.812690973 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.812747002 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.812768936 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.812803984 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.813067913 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.813081026 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.813090086 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.813096046 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.820310116 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.820331097 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:40.820414066 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.820597887 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:40.820611000 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.067922115 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.068402052 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.068413019 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.068847895 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.068850994 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.198426008 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.198479891 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.198537111 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.198740959 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.198750019 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.198757887 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.198762894 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.201468945 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.201493979 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.201582909 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.201761007 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.201773882 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.526679039 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.527244091 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.527271032 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.527932882 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.527936935 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.563421011 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.563926935 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.563951969 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.564986944 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.564992905 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.654987097 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.655008078 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.655041933 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.655085087 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.655117989 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.655261993 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.655275106 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.655284882 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.655289888 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.658063889 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.658154011 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.658279896 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.658468962 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.658504009 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.696497917 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.696674109 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.696743011 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.696810961 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.696825027 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.696839094 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.696845055 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.699091911 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.699120998 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.699172020 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.699350119 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.699363947 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.936815023 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.937755108 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.937755108 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:41.937771082 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:41.937786102 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.068255901 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.068308115 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.068487883 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.068557978 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.068569899 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.068589926 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.068595886 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.071002960 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.071063042 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.071146011 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.071271896 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.071295023 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.409107924 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.409625053 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.409660101 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.410073042 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.410087109 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.437220097 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.437644005 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.437669992 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.438069105 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.438074112 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.543479919 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.543499947 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.543536901 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.543572903 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.543622971 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.543832064 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.543869019 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.543895960 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.543910980 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.546539068 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.546576977 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.546816111 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.546956062 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.546966076 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.630692005 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.630789042 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.630868912 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.630996943 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.631012917 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.631022930 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.631027937 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.633644104 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.633675098 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.633985043 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.634042978 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.634049892 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.809957027 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.810375929 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.810432911 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.810831070 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.810847998 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.941577911 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.941598892 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.941634893 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.941658974 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.941703081 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.941919088 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.941932917 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.941951036 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.941957951 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.944701910 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.944746971 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:42.944849968 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.945038080 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:42.945051908 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.291408062 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.291879892 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.291919947 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.292361975 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.292368889 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.368486881 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.369472980 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.369473934 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.369498968 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.369513988 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.424511909 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.424567938 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.424751043 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.424876928 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.424876928 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.424901009 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.424912930 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.427620888 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.427647114 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.427808046 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.427892923 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.427900076 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.501511097 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.501581907 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.501761913 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.501833916 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.501835108 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.501844883 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.501848936 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.504098892 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.504137993 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.504446030 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.504446030 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.504479885 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.663527012 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.664479017 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.664479017 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.664518118 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.664535046 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.792238951 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.792289019 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.792516947 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.792587042 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.792587042 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.792609930 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.792622089 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.795268059 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.795295000 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:43.795418978 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.795557976 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:43.795566082 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.166219950 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.166769028 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.166779995 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.167222023 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.167227030 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.246573925 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.247375965 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.247406006 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.247806072 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.247812986 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.297518015 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.297552109 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.297590017 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.297600031 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.297645092 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.297858953 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.297869921 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.297895908 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.297900915 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.300630093 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.300668001 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.300734043 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.300926924 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.300941944 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.394910097 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.395004988 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.395071030 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.395318985 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.395342112 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.395360947 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.395369053 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.398091078 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.398118019 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.398313999 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.398483038 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.398495913 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.537811041 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.538239002 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.538248062 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.538719893 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.538726091 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.670792103 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.670815945 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.670876980 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.670902014 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.670938969 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.671236992 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.671236992 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.671246052 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.671253920 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.674169064 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.674195051 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:44.674256086 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.674434900 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:44.674451113 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.020071030 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.020973921 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.020973921 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.020994902 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.021004915 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.149338007 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.149382114 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.149593115 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.149678946 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.149678946 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.149697065 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.149710894 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.151617050 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.152005911 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.152019978 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.152431011 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.152431011 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.152445078 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.152463913 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.152808905 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.152808905 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.152832031 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.288733959 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.288777113 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.288836956 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.288871050 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.288887024 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.289062977 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.289062977 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.289071083 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.289078951 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.291265011 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.291301012 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.293025970 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.293193102 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.293210983 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.409161091 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.409687996 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.409702063 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.410156012 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.410161972 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.554884911 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.554956913 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.555179119 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.555179119 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.555350065 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.555375099 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.557775021 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.557794094 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.558036089 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.558036089 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.558063030 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.923850060 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.928930044 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.928946972 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:45.936943054 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:45.936949015 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.026504040 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.030153990 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.030168056 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.036201954 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.036210060 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.081115007 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.081182957 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.081242085 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.081609964 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.081619024 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.081628084 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.081634045 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.090730906 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.090837955 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.090922117 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.091105938 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.091140985 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.162661076 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.162755013 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.162811995 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.162902117 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.162911892 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.162924051 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.162930965 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.165736914 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.165762901 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.165826082 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.165982962 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.166002035 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.289278030 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.289681911 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.289695978 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.290235996 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.290241003 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.408130884 CEST	49959	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:04:46.408154964 CEST	443	49959	142.250.184.196	192.168.2.5
Oct 25, 2024 17:04:46.408231974 CEST	49959	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:04:46.409121037 CEST	49959	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:04:46.409136057 CEST	443	49959	142.250.184.196	192.168.2.5
Oct 25, 2024 17:04:46.422979116 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.423086882 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.423134089 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.423140049 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.423187971 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.423427105 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.423435926 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.423446894 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.423450947 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.434289932 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.434307098 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.434375048 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.436577082 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.436589003 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.835587025 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.836416960 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.836471081 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.837119102 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.837135077 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.898999929 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.899424076 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.899446964 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.899951935 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.899957895 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.973026991 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.973104000 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.973172903 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.973321915 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.973368883 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.973400116 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.973417044 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.976380110 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.976414919 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:46.976478100 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.976634026 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:46.976640940 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.032659054 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.032708883 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.032857895 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.032968044 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.032968044 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.032980919 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.032988071 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.035520077 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.035552979 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.035737991 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.035763979 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.035769939 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.172570944 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.173069954 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.173083067 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.173530102 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.173533916 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.253400087 CEST	443	49959	142.250.184.196	192.168.2.5
Oct 25, 2024 17:04:47.253675938 CEST	49959	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:04:47.253693104 CEST	443	49959	142.250.184.196	192.168.2.5
Oct 25, 2024 17:04:47.253973007 CEST	443	49959	142.250.184.196	192.168.2.5
Oct 25, 2024 17:04:47.254595041 CEST	49959	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:04:47.254650116 CEST	443	49959	142.250.184.196	192.168.2.5
Oct 25, 2024 17:04:47.295331001 CEST	49959	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:04:47.304270029 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.304325104 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.304574966 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.304595947 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.304595947 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.304605007 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.304611921 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.307677031 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.307703972 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.308135986 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.308202028 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.308207989 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.710410118 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.711328983 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.711344957 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.711644888 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.711652040 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.768697023 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.781337023 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.781348944 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.783930063 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.783940077 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.840111017 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.840250015 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.840811968 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.840956926 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.840956926 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.840977907 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.840984106 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.847358942 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.847381115 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.851433992 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.851720095 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.851732969 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.909682035 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.909773111 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.909946918 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.909946918 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.910149097 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.910166025 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.912457943 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.912501097 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:47.912728071 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.912728071 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:47.912764072 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.032061100 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.032555103 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.032568932 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.033147097 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.033153057 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.161521912 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.161592007 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.161660910 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.161894083 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.161894083 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.161914110 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.161926031 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.165184021 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.165226936 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.165484905 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.165613890 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.165627956 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.588165045 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.588931084 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.588943958 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.589380980 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.589385986 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.653899908 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.654418945 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.654434919 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.655134916 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.655141115 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.718007088 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.718214035 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.718313932 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.718401909 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.718415976 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.718427896 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.718432903 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.721733093 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.721771955 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.721848965 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.722050905 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.722065926 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.784573078 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.784646988 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.784698963 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.784709930 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.784751892 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.784874916 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.784919977 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.784929991 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.784941912 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.784949064 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.788206100 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.788240910 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:48.788439035 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.788599968 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:48.788616896 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.102325916 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.102881908 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.102897882 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.103539944 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.103543997 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.233234882 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.233282089 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.233342886 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.233711004 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.233717918 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.233726978 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.233731985 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.237749100 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.237768888 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.237880945 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.238066912 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.238075972 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.421206951 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.424360991 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.424396992 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.424468040 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.424787998 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.424798965 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.471894979 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.472461939 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.472480059 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.473062992 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.473069906 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.534810066 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.535414934 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.535428047 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.536137104 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.536140919 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.602755070 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.602826118 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.602930069 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.602972984 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.603004932 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.603235960 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.603252888 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.603264093 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.603271961 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.606846094 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.606884956 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.606966972 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.607213020 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.607228041 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.664956093 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.665117025 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.665261030 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.665328979 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.665328979 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.665338993 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.665347099 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.668320894 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.668350935 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.668416977 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.668586969 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.668597937 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.978084087 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.978744030 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.978756905 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:49.979274035 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:49.979278088 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.115446091 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.115468025 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.115524054 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.115592003 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.115840912 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.115840912 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.116142988 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.116153955 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.119133949 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.119147062 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.119343042 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.119477987 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.119489908 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.172499895 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.172616959 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.179375887 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.179389000 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.179630041 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.180843115 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.223392963 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.308798075 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.308866978 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.309150934 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.309458017 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.309468985 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.309524059 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.309530020 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.313518047 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.313564062 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.313863993 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.314277887 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.314294100 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.333729029 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.334181070 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.336081028 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.336086988 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.336477041 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.338217974 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.379317999 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.418858051 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.419349909 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.420649052 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.420660019 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.421006918 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.425901890 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.467335939 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.467811108 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.468046904 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.469208002 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.469208002 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.469208002 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.472969055 CEST	49975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.473000050 CEST	443	49975	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.477163076 CEST	49975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.477163076 CEST	49975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.477190018 CEST	443	49975	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.559541941 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.559731960 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.560019970 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.560156107 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.560185909 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.560206890 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.560214043 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.564954996 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.564994097 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.569238901 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.569238901 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.569277048 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.780538082 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.780555964 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.848701954 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.848834991 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.850348949 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.850353956 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.850553036 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.851584911 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.899322987 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.979733944 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.979757071 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.979796886 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.979895115 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.979895115 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.980149031 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.980149031 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.980154991 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.980160952 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.984956980 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.984967947 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:50.985171080 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.986514091 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:50.986522913 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.048950911 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.050896883 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.050910950 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.053123951 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.053129911 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.181123972 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.181194067 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.181251049 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.181471109 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.181483030 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.181519032 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.181525946 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.185070038 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.185087919 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.185175896 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.185400963 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.185415983 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.238521099 CEST	443	49975	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.239814997 CEST	49975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.239823103 CEST	443	49975	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.241130114 CEST	49975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.241133928 CEST	443	49975	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.308406115 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.309042931 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.309053898 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.309688091 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.309694052 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.373399973 CEST	443	49975	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.373929977 CEST	443	49975	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.374003887 CEST	49975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.374063015 CEST	49975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.374089956 CEST	443	49975	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.374104023 CEST	49975	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.374113083 CEST	443	49975	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.378277063 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.378298998 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.378384113 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.378546000 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.378557920 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.439205885 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.439235926 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.439322948 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.439393044 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.439455032 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.439614058 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.439630985 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.439642906 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.439650059 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.442691088 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.442785025 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.442882061 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.443048000 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.443078041 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.728545904 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.729115009 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.729125977 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.729516983 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.729521036 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.893871069 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.894028902 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.894109964 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.894285917 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.894301891 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.894315004 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.894320011 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.897629976 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.897670031 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.897744894 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.897937059 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.897954941 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.945799112 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.946410894 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.946454048 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:51.946954966 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:51.946962118 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.078130007 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.078190088 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.078315973 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.078414917 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.078414917 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.078680038 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.078680038 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.078699112 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.078711987 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.081990957 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.082045078 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.082233906 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.082389116 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.082408905 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.112601995 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.113599062 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.113599062 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.113624096 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.113641024 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.180308104 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.181243896 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.181243896 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.181297064 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.181322098 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.241477013 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.241530895 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.241662979 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.241699934 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.241811991 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.242033958 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.242033958 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.242052078 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.242060900 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.247515917 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.247549057 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.247807026 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.248028040 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.248040915 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.310266972 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.310316086 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.310425997 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.310460091 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.310605049 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.310652018 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.310652018 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.310672998 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.310683012 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.314310074 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.314357042 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.314995050 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.314995050 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.315026999 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.655040979 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.656291008 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.656291008 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.656337976 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.656348944 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.786039114 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.786057949 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.786108017 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.786140919 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.786247015 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.786386967 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.786386967 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.786413908 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.786422968 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.789706945 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.789743900 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.789861917 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.790015936 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.790028095 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.825584888 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.826626062 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.826626062 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.826658010 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.826693058 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.958648920 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.958722115 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.958944082 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.959075928 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.959075928 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.959121943 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.959147930 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.963960886 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.964021921 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:52.968595028 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.969217062 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:52.969238997 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.006841898 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.007390976 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.007404089 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.007978916 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.007982969 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.049458027 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.049947977 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.049978018 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.050549984 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.050555944 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.137898922 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.137981892 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.138101101 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.138361931 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.138381004 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.138391018 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.138396978 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.143167019 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.143218994 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.143345118 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.143733025 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.143764973 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.182686090 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.182842016 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.182971001 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.183006048 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.183022022 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.183031082 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.183034897 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.186387062 CEST	49988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.186436892 CEST	443	49988	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.186505079 CEST	49988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.187010050 CEST	49988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.187026024 CEST	443	49988	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.421176910 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.424079895 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.424120903 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.424196005 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.424485922 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.424504042 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.553890944 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.554420948 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.554469109 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.555097103 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.555114985 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.732053995 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.732125044 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.732374907 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.732431889 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.732455015 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.732482910 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.732494116 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.736047983 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.736099005 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.736170053 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.736404896 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.736422062 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.746195078 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.746682882 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.746709108 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.747276068 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.747282028 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.882986069 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.883047104 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.883112907 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.883141041 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.883179903 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.883184910 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.883238077 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.883385897 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.883399963 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.883410931 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.883415937 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.886940956 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.886990070 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.887347937 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.887347937 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.887391090 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.889380932 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.890093088 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.890172958 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.890815020 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.890832901 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.975260019 CEST	443	49988	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.975867987 CEST	49988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.975907087 CEST	443	49988	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:53.976624012 CEST	49988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:53.976629019 CEST	443	49988	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.022237062 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.022304058 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.022409916 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.022433043 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.022536039 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.022756100 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.022809982 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.022841930 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.022857904 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.026667118 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.026711941 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.026786089 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.026983976 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.026998043 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.226388931 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.227118015 CEST	443	49988	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.227161884 CEST	443	49988	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.227181911 CEST	443	49988	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.227238894 CEST	49988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.227260113 CEST	443	49988	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.227296114 CEST	49988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.227329969 CEST	49988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.227868080 CEST	443	49988	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.227870941 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.227900982 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.228018045 CEST	443	49988	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.228023052 CEST	49988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.228321075 CEST	49988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.229360104 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.229367018 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.230411053 CEST	49988	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.230429888 CEST	443	49988	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.237188101 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.237234116 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.237603903 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.237603903 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.237649918 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.373414993 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.373472929 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.373538017 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.373570919 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.373606920 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.373867035 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.374233007 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.374255896 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.374269962 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.374278069 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.379132986 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.379175901 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.379273891 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.379458904 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.379476070 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.482726097 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.485929012 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.485953093 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.486679077 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.486684084 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.645116091 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.649367094 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.649398088 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.656876087 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.656883955 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.737040997 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.737068892 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.737082005 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.737168074 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.737193108 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.737238884 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.784903049 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.784976959 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.785064936 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.785078049 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.785121918 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.785212994 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.785386086 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.785399914 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.785415888 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.785423040 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.788532019 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.788569927 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.788752079 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.788940907 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.788955927 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.809473991 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.810045004 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.810079098 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.810622931 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.810628891 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.856153011 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.856190920 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.856229067 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.856251001 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.856273890 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.856312037 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.856446981 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.856465101 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.856476068 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.856481075 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.859210014 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.859247923 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.859311104 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.859472036 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.859488964 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.947336912 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.947366953 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.947422981 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.947434902 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.947623968 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.947676897 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.947695971 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.947705984 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.947712898 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.950223923 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.950256109 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.950432062 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.950592995 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.950609922 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.984678030 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.985076904 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.985095024 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:54.985652924 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:54.985657930 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.116384983 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.116555929 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.116625071 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.116792917 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.116812944 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.116822958 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.116831064 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.119899035 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.119927883 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.120039940 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.120222092 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.120237112 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.120640993 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.121038914 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.121069908 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.121601105 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.121609926 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.277323008 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.277405977 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.277463913 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.277652979 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.277669907 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.277687073 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.277692080 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.280461073 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.280492067 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.280625105 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.280797958 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.280812979 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.529757977 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.530258894 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.530287027 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.530880928 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.530889988 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.593719006 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.594172955 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.594196081 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.594762087 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.594768047 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.657996893 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.658932924 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.659177065 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.659177065 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.659177065 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.662101984 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.662134886 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.662250042 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.662419081 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.662431955 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.692701101 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.693237066 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.693253040 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.693829060 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.693841934 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.736162901 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.736248970 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.736315966 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.736505985 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.736516953 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.736529112 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.736535072 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.739634037 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.739667892 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.739831924 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.739996910 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.740011930 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.824132919 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.824212074 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.824276924 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.824287891 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.824327946 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.824454069 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.824479103 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.824496984 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.824527025 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.824534893 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.879221916 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.879714966 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.879724979 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.880233049 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.880238056 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:55.968456030 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:55.968481064 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.019853115 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.020020008 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.020090103 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.020275116 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.020286083 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.020293951 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.020298004 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.023966074 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.024471998 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.024485111 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.025101900 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.025109053 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.155517101 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.155600071 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.155864954 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.155864954 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.156050920 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.156069040 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.408936977 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.409871101 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.409890890 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.410614014 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.410620928 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.484740973 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.485260010 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.485277891 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.485841036 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.485845089 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.539115906 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.539196014 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.539727926 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.539729118 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.539891005 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.539912939 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.615564108 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.615724087 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:56.615886927 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.615886927 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.615998983 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 17:04:56.616019011 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 17:04:57.251068115 CEST	443	49959	142.250.184.196	192.168.2.5
Oct 25, 2024 17:04:57.251142025 CEST	443	49959	142.250.184.196	192.168.2.5
Oct 25, 2024 17:04:57.251216888 CEST	49959	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:04:58.844938993 CEST	49959	443	192.168.2.5	142.250.184.196
Oct 25, 2024 17:04:58.844975948 CEST	443	49959	142.250.184.196	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 17:03:42.650612116 CEST	53	64663	1.1.1.1	192.168.2.5
Oct 25, 2024 17:03:42.652654886 CEST	53	62858	1.1.1.1	192.168.2.5
Oct 25, 2024 17:03:43.902105093 CEST	53	49348	1.1.1.1	192.168.2.5
Oct 25, 2024 17:03:43.937342882 CEST	64679	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:03:43.937483072 CEST	51314	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:03:43.945544004 CEST	53	64679	1.1.1.1	192.168.2.5
Oct 25, 2024 17:03:43.945579052 CEST	53	51314	1.1.1.1	192.168.2.5
Oct 25, 2024 17:03:46.347651005 CEST	62280	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:03:46.348335981 CEST	62122	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:03:46.354965925 CEST	53	62280	1.1.1.1	192.168.2.5
Oct 25, 2024 17:03:46.356185913 CEST	53	62122	1.1.1.1	192.168.2.5
Oct 25, 2024 17:04:00.859307051 CEST	53	56535	1.1.1.1	192.168.2.5
Oct 25, 2024 17:04:02.809386015 CEST	49381	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:04:02.809915066 CEST	59942	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:04:04.762806892 CEST	55792	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:04:04.763237953 CEST	59725	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:04:04.770821095 CEST	53	55792	1.1.1.1	192.168.2.5
Oct 25, 2024 17:04:04.771995068 CEST	53	59725	1.1.1.1	192.168.2.5
Oct 25, 2024 17:04:05.166001081 CEST	59884	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:04:05.166275024 CEST	55212	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:04:06.629265070 CEST	55284	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:04:06.629601955 CEST	50946	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:04:07.903333902 CEST	49678	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:04:07.903527975 CEST	59463	53	192.168.2.5	1.1.1.1
Oct 25, 2024 17:04:19.648937941 CEST	53	61172	1.1.1.1	192.168.2.5
Oct 25, 2024 17:04:42.183573008 CEST	53	63262	1.1.1.1	192.168.2.5
Oct 25, 2024 17:04:42.726500988 CEST	53	65057	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 25, 2024 17:04:07.932519913 CEST	192.168.2.5	1.1.1.1	c281	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 17:03:43.937342882 CEST	192.168.2.5	1.1.1.1	0x43fe	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:03:43.937483072 CEST	192.168.2.5	1.1.1.1	0x7dce	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
Oct 25, 2024 17:03:46.347651005 CEST	192.168.2.5	1.1.1.1	0xfbf7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:03:46.348335981 CEST	192.168.2.5	1.1.1.1	0x37f8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 17:04:02.809386015 CEST	192.168.2.5	1.1.1.1	0x47b5	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:04:02.809915066 CEST	192.168.2.5	1.1.1.1	0xeb02	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Oct 25, 2024 17:04:04.762806892 CEST	192.168.2.5	1.1.1.1	0x4971	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:04:04.763237953 CEST	192.168.2.5	1.1.1.1	0x73ad	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
Oct 25, 2024 17:04:05.166001081 CEST	192.168.2.5	1.1.1.1	0x9518	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:04:05.166275024 CEST	192.168.2.5	1.1.1.1	0x9b87	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Oct 25, 2024 17:04:06.629265070 CEST	192.168.2.5	1.1.1.1	0xbff7	Standard query (0)	r1.res.office365.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:04:06.629601955 CEST	192.168.2.5	1.1.1.1	0xb85f	Standard query (0)	r1.res.office365.com	65	IN (0x0001)	false
Oct 25, 2024 17:04:07.903333902 CEST	192.168.2.5	1.1.1.1	0x24ea	Standard query (0)	r1.res.office365.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:04:07.903527975 CEST	192.168.2.5	1.1.1.1	0x50af	Standard query (0)	r1.res.office365.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 17:03:43.945544004 CEST	1.1.1.1	192.168.2.5	0x43fe	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:03:43.945544004 CEST	1.1.1.1	192.168.2.5	0x43fe	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:03:43.945544004 CEST	1.1.1.1	192.168.2.5	0x43fe	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:03:43.945544004 CEST	1.1.1.1	192.168.2.5	0x43fe	No error (0)	HHN-efz.ms-acdc.office.com		52.98.152.162	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:03:43.945544004 CEST	1.1.1.1	192.168.2.5	0x43fe	No error (0)	HHN-efz.ms-acdc.office.com		52.98.179.66	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:03:43.945544004 CEST	1.1.1.1	192.168.2.5	0x43fe	No error (0)	HHN-efz.ms-acdc.office.com		52.98.171.226	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:03:43.945544004 CEST	1.1.1.1	192.168.2.5	0x43fe	No error (0)	HHN-efz.ms-acdc.office.com		52.98.241.178	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:03:43.945579052 CEST	1.1.1.1	192.168.2.5	0x7dce	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:03:43.945579052 CEST	1.1.1.1	192.168.2.5	0x7dce	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:03:43.945579052 CEST	1.1.1.1	192.168.2.5	0x7dce	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:03:46.354965925 CEST	1.1.1.1	192.168.2.5	0xfbf7	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:03:46.356185913 CEST	1.1.1.1	192.168.2.5	0x37f8	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 17:03:55.464171886 CEST	1.1.1.1	192.168.2.5	0xcce6	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:03:55.464171886 CEST	1.1.1.1	192.168.2.5	0xcce6	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:03:57.184706926 CEST	1.1.1.1	192.168.2.5	0x186e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:03:57.184706926 CEST	1.1.1.1	192.168.2.5	0x186e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:03:57.878875971 CEST	1.1.1.1	192.168.2.5	0xc04c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:03:57.878875971 CEST	1.1.1.1	192.168.2.5	0xc04c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:04:02.817249060 CEST	1.1.1.1	192.168.2.5	0x47b5	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:02.818042040 CEST	1.1.1.1	192.168.2.5	0xeb02	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:04.770821095 CEST	1.1.1.1	192.168.2.5	0x4971	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:04.770821095 CEST	1.1.1.1	192.168.2.5	0x4971	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:04.770821095 CEST	1.1.1.1	192.168.2.5	0x4971	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:04.770821095 CEST	1.1.1.1	192.168.2.5	0x4971	No error (0)	FRA-efz.ms-acdc.office.com		52.98.252.82	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:04:04.770821095 CEST	1.1.1.1	192.168.2.5	0x4971	No error (0)	FRA-efz.ms-acdc.office.com		52.98.179.226	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:04:04.770821095 CEST	1.1.1.1	192.168.2.5	0x4971	No error (0)	FRA-efz.ms-acdc.office.com		52.98.253.162	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:04:04.771995068 CEST	1.1.1.1	192.168.2.5	0x73ad	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:05.173952103 CEST	1.1.1.1	192.168.2.5	0x9518	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:05.174340010 CEST	1.1.1.1	192.168.2.5	0x9b87	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:06.637242079 CEST	1.1.1.1	192.168.2.5	0xbff7	No error (0)	r1.res.office365.com	wildcard.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:06.651271105 CEST	1.1.1.1	192.168.2.5	0xb85f	No error (0)	r1.res.office365.com	wildcard.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:07.911132097 CEST	1.1.1.1	192.168.2.5	0x24ea	No error (0)	r1.res.office365.com	wildcard.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:07.932451010 CEST	1.1.1.1	192.168.2.5	0x50af	No error (0)	r1.res.office365.com	wildcard.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:12.058203936 CEST	1.1.1.1	192.168.2.5	0x433	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:12.058203936 CEST	1.1.1.1	192.168.2.5	0x433	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:04:34.741668940 CEST	1.1.1.1	192.168.2.5	0xaf9e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:34.741668940 CEST	1.1.1.1	192.168.2.5	0xaf9e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 17:04:55.508725882 CEST	1.1.1.1	192.168.2.5	0xcedd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 17:04:55.508725882 CEST	1.1.1.1	192.168.2.5	0xcedd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

outlook.office365.com

fs.microsoft.com

otelrules.azureedge.net

https:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	52.98.152.162	443	6088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:45 UTC	1850	OUT	GET /Encryption/retrieve.ashx?recipientemailaddress=policeanimalcontrol%40crgov.com&senderemailaddress=cvolkert%40douglas.co.us&senderorganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT%2fekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com&consumerEncryption=false&senderorgid=d3204e62-5d1f-428d-90ae-ec95e74c18af&urldecoded=1&e4e_sdata=FR9cRcoDZqVue%2bO%2bn1%2fyYOLQ%2ftrZgZh5qJZyEpSyzZqwSQFyWEHIbcv9BkRXuzKjIXM5ypK41llMN1jbF%2bsdlodzrnfsIpi4rfunbLhjE3133ReR8wYmUjqLdoh7ByeCopvMq7WRUWQItwf%2f343DxcBR2m1hqAe%2b3pwawbGMtjhO5ppjoyWf5eLPecq [TRUNCATED] Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 15:03:49 UTC	2843	IN	HTTP/1.1 302 Cache-Control: private Content-Length: 191 Content-Type: text/html; charset=utf-8 Location: /Encryption/default.aspx?itemID=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b Server: Microsoft-IIS/10.0 request-id: eebb1efa-37ab-ba6c-9979-cba3f79844de X-CalculatedBETarget: SJ0PR09MB10289.namprd09.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-OmeVersion=V2; path=/; secure; HttpOnly Set-Cookie: X-ConsumerEncryption=false; path=/; secure; HttpOnly Set-Cookie: X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; path=/; secure; HttpOnly Set-Cookie: E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; path=/; secure; HttpOnly Set-Cookie: X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; path=/; secure; HttpOnly Set-Cookie: X-SenderEmailAddress=cvolkert@douglas.co.us; path=/; secure; HttpOnly Set-Cookie: X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ==; path=/; secure; HttpOnly Set-Cookie: X-MessageId=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e; path=/; secure; HttpOnly Set-Cookie: X-StoreObjectId=; path=/; secure; HttpOnly Set-Cookie: X-RecipientPrimarySmtp=; path=/; secure; HttpOnly Set-Cookie: E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b=SJ0PR09MB10289; path=/; secure; HttpOnly Set-Cookie: X-OTPItemId=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b; path=/; secure; HttpOnly Set-Cookie: X-SenderExternalOrganizationId=d3204e62-5d1f-428d-90ae-ec95e74c18af; path=/; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-AspNet-Version: 4.0.30319 X-DiagInfo: SJ0PR09MB10289 X-BEServer: SJ0PR09MB10289 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR3P281CA0034.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR3P281CA0034 Date: Fri, 25 Oct 2024 15:03:48 GMT Connection: close
2024-10-25 15:03:49 UTC	191	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 45 6e 63 72 79 70 74 69 6f 6e 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 69 74 65 6d 49 44 3d 45 34 45 5f 4d 5f 35 37 65 66 36 38 65 62 2d 39 66 37 66 2d 34 35 39 37 2d 62 34 64 32 2d 38 35 65 31 31 32 66 32 64 66 30 62 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/Encryption/default.aspx?itemID=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 15:03:48 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=178874 Date: Fri, 25 Oct 2024 15:03:48 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49710	52.98.152.162	443	6088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:49 UTC	2226	OUT	GET /Encryption/default.aspx?itemID=E4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW [TRUNCATED]
2024-10-25 15:03:50 UTC	1323	IN	HTTP/1.1 302 Content-Length: 685 Content-Type: text/html; charset=utf-8 Location: /Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b&e4e_sdata=qzv%2fz%2bplRspRv14ZzGl8pJGStWaVZS%2fufZJupxU0tQUcBco8bO%2bopTabxk%2b1cAz2iIHLAz5fFZf%2bEDhNjYKE0glpQ%2brPMe%2bB7ymsLELxATIEtkIHgocruc%2fAQLymAWfD2vWiKLg5TEw2u8i7iNlsQytBFrGqqCMy56e%2fwwLJRZjmAgM%2fWDc%2f%2b%2bJuD7WhM2vtz2TG4prYKrSfMZm7L3mdYW6uo%2fPI8cI7lxbMTjSOLB7nNYnaJVFt0kQ9h9h2XFaUPIEhAWGh7J8z1i2FG3Gpdfb6BJEdzVPHygxeHqGPLOBb%2ffkW7M88s6ehLYSx4ofpvrSgoPstgzEz2I9gdZ8Urg%3d%3d Server: Microsoft-IIS/10.0 request-id: 8b2beb21-515f-84ad-be04-37b798b415aa X-CalculatedBETarget: SJ0PR09MB10289.namprd09.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: SJ0PR09MB10289 X-BEServer: SJ0PR09MB10289 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR3P281CA0034.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR3P281CA0034 Date: Fri, 25 Oct 2024 15:03:49 GMT Connection: close
2024-10-25 15:03:50 UTC	685	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 45 6e 63 72 79 70 74 69 6f 6e 2f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 70 61 67 65 2e 61 73 70 78 3f 73 74 3d 4d 69 63 72 6f 73 6f 66 74 26 61 6d 70 3b 72 75 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 25 32 66 45 6e 63 72 79 70 74 69 6f 6e 25 32 66 64 65 66 61 75 6c 74 2e 61 73 70 78 25 33 66 69 74 65 6d 49 44 25 33 64 45 34 45 5f 4d 5f 35 37 65 66 36 38 65 62 2d 39 66 37 66 2d 34 35 39 37 2d 62 34 64 32 2d 38 35 65 31 31 32 66 32 64 66 30 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:49 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 15:03:49 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=178873 Date: Fri, 25 Oct 2024 15:03:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 15:03:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	52.98.152.162	443	6088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:51 UTC	2712	OUT	GET /Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b&e4e_sdata=qzv%2fz%2bplRspRv14ZzGl8pJGStWaVZS%2fufZJupxU0tQUcBco8bO%2bopTabxk%2b1cAz2iIHLAz5fFZf%2bEDhNjYKE0glpQ%2brPMe%2bB7ymsLELxATIEtkIHgocruc%2fAQLymAWfD2vWiKLg5TEw2u8i7iNlsQytBFrGqqCMy56e%2fwwLJRZjmAgM%2fWDc%2f%2b%2bJuD7WhM2vtz2TG4prYKrSfMZm7L3mdYW6uo%2fPI8cI7lxbMTjSOLB7nNYnaJVFt0kQ9h9h2XFaUPIEhAWGh7J8z1i2FG3Gpdfb6BJEdzVPHygxeHqGPLOBb%2ffkW7M88s6ehLYSx4ofpvrSgoPstgzEz2I9gdZ8Urg%3d%3d HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW [TRUNCATED]
2024-10-25 15:04:02 UTC	922	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 8256 Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 request-id: 61051b67-06a3-0c1a-2a34-ff43f5e0a37e X-CalculatedBETarget: SJ0PR09MB10289.namprd09.prod.outlook.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-AnonResource=true; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-AspNet-Version: 4.0.30319 X-DiagInfo: SJ0PR09MB10289 X-BEServer: SJ0PR09MB10289 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR3P281CA0028.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR3P281CA0028 Date: Fri, 25 Oct 2024 15:04:02 GMT Connection: close
2024-10-25 15:04:02 UTC	8256	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49717	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:56 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:03:56 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:03:56 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150356Z-16849878b78wv88bk51myq5vxc000000011g000000004cbk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:03:56 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-25 15:03:56 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-25 15:03:56 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-25 15:03:56 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-25 15:03:56 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-25 15:03:57 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-25 15:03:57 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-25 15:03:57 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-25 15:03:57 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-25 15:03:57 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49720	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:58 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:03:58 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:03:58 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150358Z-16849878b78fssff8btnns3b14000000010g0000000088ua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:03:58 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49722	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:58 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:03:58 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:03:58 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23ba7a24-801e-0015-5af3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150358Z-17c5cb586f67p8ffw0hbk5rahw00000002t000000000exuz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:03:58 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49724	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:58 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:03:58 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:03:58 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150358Z-16849878b78p8hrf1se7fucxk800000001ng000000003wbv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:03:58 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49723	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:58 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:03:58 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:03:58 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150358Z-16849878b78j7llf5vkyvvcehs00000001q000000000qsyx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:03:58 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49721	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:58 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:03:58 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:03:58 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150358Z-16849878b78tg5n42kspfr0x4800000000qg00000000ebgn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:03:58 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49728	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:59 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:03:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:03:59 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7aa3dd97-101e-005a-6a20-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150359Z-17c5cb586f6gkqkwd0x1ge8t0400000000vg00000000gpgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:03:59 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49731	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:59 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:03:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:03:59 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d2ec1471-a01e-0032-1827-261949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150359Z-17c5cb586f6w4mfs5xcmnrny6n00000002800000000045xd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:03:59 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49730	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:59 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:03:59 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:03:59 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150359Z-16849878b78fssff8btnns3b1400000000y000000000h79u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:03:59 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49732	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:59 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:03:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:03:59 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 88497579-201e-0000-113a-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150359Z-17c5cb586f67p8ffw0hbk5rahw000000030g000000000c4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:03:59 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49729	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:03:59 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:03:59 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:03:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150359Z-17c5cb586f6mhqqb91r8trf2c800000001e000000000g1f1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:03:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49734	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:00 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:00 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150400Z-16849878b78fssff8btnns3b140000000100000000009znp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:00 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49735	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:00 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 43877b29-f01e-005d-36f3-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150400Z-r197bdfb6b4jlq9hb8xf0re6t400000000p000000000emcm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49736	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:00 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150400Z-16849878b78fssff8btnns3b1400000000y000000000h7c7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:00 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49737	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:00 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 3892a0ce-b01e-003d-5f3a-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150400Z-17c5cb586f6dsb4r19gvkc9r7s00000002yg000000000cq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:00 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49738	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:00 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:00 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150400Z-16849878b786fl7gm2qg4r5y7000000000wg00000000q1v7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:00 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49740	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:01 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:01 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1ff5e4cc-601e-0001-30ce-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150401Z-15b8d89586fx2hlt035xdehq580000000gdg0000000046e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:01 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49741	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:01 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 7ae4e8d9-101e-005a-2134-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150401Z-17c5cb586f6f69jxsre6kx2wmc000000030000000000cw34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49742	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:01 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:01 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 94fafadb-001e-0049-3f27-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150401Z-r197bdfb6b42rt68rzg9338g1g00000001sg00000000g4vh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:01 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49743	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:01 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:01 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150401Z-16849878b78fssff8btnns3b1400000000xg00000000m0zr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:01 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49744	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:01 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:01 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150401Z-16849878b78hz7zj8u0h2zng1400000009hg00000000263c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:01 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49745	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:02 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150402Z-16849878b785jrf8dn0d2rczaw00000001u000000000k6fp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49746	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:02 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 630b92e5-101e-00a2-203d-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150402Z-r197bdfb6b466qclztvgs64z10000000028g000000000hw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49748	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:02 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:02 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 00f7314e-e01e-0052-48ac-21d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150402Z-16849878b78qf2gleqhwczd21s00000000sg00000000t4vv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:02 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49747	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:02 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:02 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: faf669f2-101e-0065-23a4-264088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150402Z-16849878b787wpl5wqkt5731b400000001b000000000rcrx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:02 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49749	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:02 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:02 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: a47c2137-201e-0051-01e4-257340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150402Z-15b8d89586ff5l62aha9080wv000000001z0000000006s6y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:02 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49750	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:02 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:03 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ea438a18-a01e-0053-68ef-258603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150403Z-17c5cb586f6qt228zy1nuwhy2g00000002tg00000000829t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:03 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49751	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:02 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ff743265-301e-000c-1ff2-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150403Z-r197bdfb6b42rt68rzg9338g1g00000001y00000000001vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:03 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:03 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: deaa19c2-701e-006f-33de-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150403Z-17c5cb586f6gkqkwd0x1ge8t0400000000z000000000adbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:03 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49753	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:03 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150403Z-16849878b786fl7gm2qg4r5y7000000000vg00000000t5h6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:03 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:03 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150403Z-16849878b7898p5f6vryaqvp5800000001e000000000q363 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:03 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49755	52.98.152.162	443	6088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:03 UTC	2639	OUT	GET /Encryption/authentication.css HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b&e4e_sdata=qzv%2fz%2bplRspRv14ZzGl8pJGStWaVZS%2fufZJupxU0tQUcBco8bO%2bopTabxk%2b1cAz2iIHLAz5fFZf%2bEDhNjYKE0glpQ%2brPMe%2bB7ymsLELxATIEtkIHgocruc%2fAQLymAWfD2vWiKLg5TEw2u8i7iNlsQytBFrGqqCMy56e%2fwwLJRZjmAgM%2fWDc%2f%2b%2bJuD7WhM2vtz2TG4prYKrSfMZm7L3mdYW6uo%2fPI8cI7lxbMTjSOLB7nNYnaJVFt0kQ9h9h2XFaUPIEhAWGh7J8z1i2FG3Gpdfb6BJEdzVPHygxeHqGPLOBb%2ffkW7M88s6ehLYSx4ofpvrSgoPstgzEz2I9gdZ8Urg%3d%3d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW [TRUNCATED]
2024-10-25 15:04:04 UTC	871	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 3304 Content-Type: text/css Last-Modified: Thu, 24 Oct 2024 09:11:42 GMT Accept-Ranges: bytes ETag: "0db8dbdf425db1:0" Server: Microsoft-IIS/10.0 request-id: 2957c16d-6e37-d49c-1248-6934e0455ada X-CalculatedBETarget: SJ0PR09MB10289.namprd09.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: SJ0PR09MB10289 X-BEServer: SJ0PR09MB10289 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR3P281CA0019.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR3P281CA0019 Date: Fri, 25 Oct 2024 15:04:04 GMT Connection: close
2024-10-25 15:04:04 UTC	3304	IN	Data Raw: 2f 2a 0d 0a 20 20 20 20 54 68 65 20 62 61 73 65 20 73 74 79 6c 65 73 20 69 73 20 75 73 65 64 20 6f 6e 6c 79 20 62 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 67 65 2e 0d 0a 20 20 20 20 54 68 65 20 63 73 73 20 73 74 79 6c 65 73 20 61 72 65 20 66 72 6f 6d 20 3c 6c 69 6e 6b 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 37 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 20 20 20 20 74 68 61 20 74 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 67 65 20 75 73 65 64 20 74 6f 20 72 65 66 65 72 65 6e 63 65 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 27 73 20 63 61 75 Data Ascii: /* The base styles is used only by authentication page. The css styles are from <linkrel="stylesheet"href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css"> tha tauthentication page used to reference. However, it's cau

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:03 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:04 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:03 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 8cd636d9-f01e-0003-4da3-264453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150403Z-16849878b78tg5n42kspfr0x4800000000mg00000000rwxg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-25 15:04:04 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49754	52.98.152.162	443	6088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:03 UTC	2675	OUT	GET /Encryption/lock.png HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b&e4e_sdata=qzv%2fz%2bplRspRv14ZzGl8pJGStWaVZS%2fufZJupxU0tQUcBco8bO%2bopTabxk%2b1cAz2iIHLAz5fFZf%2bEDhNjYKE0glpQ%2brPMe%2bB7ymsLELxATIEtkIHgocruc%2fAQLymAWfD2vWiKLg5TEw2u8i7iNlsQytBFrGqqCMy56e%2fwwLJRZjmAgM%2fWDc%2f%2b%2bJuD7WhM2vtz2TG4prYKrSfMZm7L3mdYW6uo%2fPI8cI7lxbMTjSOLB7nNYnaJVFt0kQ9h9h2XFaUPIEhAWGh7J8z1i2FG3Gpdfb6BJEdzVPHygxeHqGPLOBb%2ffkW7M88s6ehLYSx4ofpvrSgoPstgzEz2I9gdZ8Urg%3d%3d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW [TRUNCATED]
2024-10-25 15:04:04 UTC	872	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 1100 Content-Type: image/png Last-Modified: Thu, 24 Oct 2024 09:11:42 GMT Accept-Ranges: bytes ETag: "0db8dbdf425db1:0" Server: Microsoft-IIS/10.0 request-id: 52cb5310-16ba-aab7-858c-4690292c8da0 X-CalculatedBETarget: SJ0PR09MB10289.namprd09.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: SJ0PR09MB10289 X-BEServer: SJ0PR09MB10289 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR3P281CA0027.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR3P281CA0027 Date: Fri, 25 Oct 2024 15:04:04 GMT Connection: close
2024-10-25 15:04:04 UTC	1100	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49760	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:04 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: e3c75742-001e-0014-79f3-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150404Z-r197bdfb6b4hdk8h12qtxfwscn00000001e0000000000nyk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:04 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:04 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:04 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 9d552454-801e-0083-275a-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150404Z-17c5cb586f6mhqqb91r8trf2c800000001h00000000090sx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:04 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:04 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:04 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: e7f2251b-001e-0017-4fad-240c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150404Z-15b8d89586fsx9lfqmgrbzpgmg0000000gc0000000006qkz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:04 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49759	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:05 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 960fe732-901e-0016-4ad7-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150405Z-r197bdfb6b4b4pw6nr8czsrctg000000016000000000q4pe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:05 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:05 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 21f78716-701e-005c-7b46-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150405Z-r197bdfb6b466qclztvgs64z100000000260000000005nzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:05 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49765	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:05 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150405Z-16849878b78k46f8kzwxznephs00000009ag000000005f8q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:05 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:05 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2897d81f-501e-005b-6528-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150405Z-r197bdfb6b48v72xb403uy6hns000000018g000000005k60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:05 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:05 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:05 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 13d0f17b-b01e-0053-80f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150405Z-15b8d89586fsx9lfqmgrbzpgmg0000000gd0000000005qyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:05 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49767	52.98.152.162	443	6088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:05 UTC	2677	OUT	GET /Encryption/liveid.png HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_57ef68eb-9f7f-4597-b4d2-85e112f2df0b&e4e_sdata=qzv%2fz%2bplRspRv14ZzGl8pJGStWaVZS%2fufZJupxU0tQUcBco8bO%2bopTabxk%2b1cAz2iIHLAz5fFZf%2bEDhNjYKE0glpQ%2brPMe%2bB7ymsLELxATIEtkIHgocruc%2fAQLymAWfD2vWiKLg5TEw2u8i7iNlsQytBFrGqqCMy56e%2fwwLJRZjmAgM%2fWDc%2f%2b%2bJuD7WhM2vtz2TG4prYKrSfMZm7L3mdYW6uo%2fPI8cI7lxbMTjSOLB7nNYnaJVFt0kQ9h9h2XFaUPIEhAWGh7J8z1i2FG3Gpdfb6BJEdzVPHygxeHqGPLOBb%2ffkW7M88s6ehLYSx4ofpvrSgoPstgzEz2I9gdZ8Urg%3d%3d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW [TRUNCATED]
2024-10-25 15:04:06 UTC	872	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 2955 Content-Type: image/png Last-Modified: Thu, 24 Oct 2024 09:11:42 GMT Accept-Ranges: bytes ETag: "0db8dbdf425db1:0" Server: Microsoft-IIS/10.0 request-id: f6097827-5849-0e66-2770-465bee5027e3 X-CalculatedBETarget: SJ0PR09MB10289.namprd09.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: SJ0PR09MB10289 X-BEServer: SJ0PR09MB10289 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR3P281CA0035.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR3P281CA0035 Date: Fri, 25 Oct 2024 15:04:05 GMT Connection: close
2024-10-25 15:04:06 UTC	2955	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRPPpHYs.#.#x?vOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:05 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 44f017bc-601e-000d-6df3-242618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150405Z-15b8d89586f6nn8zb8x99wuenc00000001ng00000000dm8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:06 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:05 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:05 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150405Z-16849878b78q4pnrt955f8nkx8000000096g00000000msxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:06 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49768	52.98.252.82	443	6088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:05 UTC	1874	OUT	GET /Encryption/lock.png HTTP/1.1 Host: outlook.office365.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW [TRUNCATED]
2024-10-25 15:04:06 UTC	872	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 1100 Content-Type: image/png Last-Modified: Thu, 24 Oct 2024 09:11:42 GMT Accept-Ranges: bytes ETag: "0db8dbdf425db1:0" Server: Microsoft-IIS/10.0 request-id: 14f14394-9d5b-2b05-bc5a-7d98367cfe46 X-CalculatedBETarget: SJ0PR09MB10289.namprd09.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: SJ0PR09MB10289 X-BEServer: SJ0PR09MB10289 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: FRA X-FEProxyInfo: FR4P281CA0141.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: FRA X-Powered-By: ASP.NET X-FEServer: FR4P281CA0141 Date: Fri, 25 Oct 2024 15:04:06 GMT Connection: close
2024-10-25 15:04:06 UTC	1100	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:06 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:06 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 9658a421-401e-008c-7ff3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150406Z-15b8d89586f42m673h1quuee4s00000004u00000000042pc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:06 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:06 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:06 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150406Z-16849878b785g992cz2s9gk35c00000009bg00000000hpkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:06 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:06 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:06 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150406Z-16849878b7867ttgfbpnfxt44s00000000kg000000009smz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:06 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:06 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:06 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 352988b4-001e-0065-3a25-260b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150406Z-17c5cb586f6w4mfs5xcmnrny6n000000025000000000abbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:06 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:06 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:06 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150406Z-16849878b78c5zx4gw8tcga1b4000000095000000000rxs2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:06 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:06 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:07 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:06 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: cb602259-c01e-0046-02b2-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150406Z-16849878b78fmrkt2ukpvh9wh4000000097000000000t3fr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-25 15:04:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:06 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9a9b06d2-601e-0032-5ff9-24eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150407Z-r197bdfb6b4t7wszkhsu1pyev000000001tg000000000dte x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:07 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150407Z-15b8d89586f6nn8zb8x99wuenc00000001ng00000000dm9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:07 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150407Z-16849878b78rjhv97f3nhawr7s00000009bg00000000a9de x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:07 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150407Z-16849878b78wv88bk51myq5vxc000000011g000000004d5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49781	52.98.252.82	443	6088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:07 UTC	1876	OUT	GET /Encryption/liveid.png HTTP/1.1 Host: outlook.office365.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@douglascounty.onmicrosoft.com; X-RecipientEmailAddress=policeanimalcontrol@crgov.com\|K%2bVRzLOfkiY0QtC7OldkxTx9%2bH%2bFFJ9NmivrfiXVSeSbPZbdcJvwLUdFPi8xXQZdQ633n4WG4b5LLnCN4oIsLFDgJPocO8dGHbDOJfLBbt%2bZl%2fD4YnoRztlqCjLLBUMQIcV3izSgFNNgbqHI%2bkVOY20IisecM5%2fePV1s%2fTg06CHI%2bBCnAthrFSyqTJLlTI%2bWOoxb9PEIops5pA9VMLzqWAIes%2bq%2bLJYlE1bhhSW2iEODNg9JqJIIUgvHl%2b7OORu%2fnsxL34rDFGh3NPZBOSGyg4yK9lp77RsRlDwwJxv2yPWUNh1RI84IUs%2bEB8HSPZI89qcQ5zlgg0QuJfTccydB5w%3d%3d; X-SenderEmailAddress=cvolkert@douglas.co.us; X-SenderOrganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT/ekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW [TRUNCATED]
2024-10-25 15:04:08 UTC	872	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 2955 Content-Type: image/png Last-Modified: Thu, 24 Oct 2024 09:11:42 GMT Accept-Ranges: bytes ETag: "0db8dbdf425db1:0" Server: Microsoft-IIS/10.0 request-id: 152c5c66-0574-56d3-4f46-c07a8fe56f74 X-CalculatedBETarget: SJ0PR09MB10289.namprd09.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: SJ0PR09MB10289 X-BEServer: SJ0PR09MB10289 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: FRA X-FEProxyInfo: FR4P281CA0140.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: FRA X-Powered-By: ASP.NET X-FEServer: FR4P281CA0140 Date: Fri, 25 Oct 2024 15:04:08 GMT Connection: close
2024-10-25 15:04:08 UTC	2955	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRPPpHYs.#.#x?vOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:07 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150407Z-16849878b78tg5n42kspfr0x4800000000u00000000002ds x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:07 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d13b9d4f-c01e-0014-770d-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150407Z-17c5cb586f6hn8cl90dxzu28kw00000000g0000000004s5b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:08 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90538902-201e-0096-67fc-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150408Z-15b8d89586fvpb597drk06r8fc00000001u0000000003vre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:08 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6113d354-c01e-00a1-29f4-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150408Z-15b8d89586fdmfsg1u7xrpfws00000000510000000001mg1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:08 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:08 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150408Z-15b8d89586f2hk28h0h6zye26c000000033g00000000b2rb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:08 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:08 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:08 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 53fe968a-201e-0096-055e-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150408Z-16849878b78x6gn56mgecg60qc00000002h000000000atct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:08 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:08 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:08 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150408Z-16849878b787sbpl0sv29sm89s00000009bg00000000sf98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:08 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:09 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d4a93cd8-001e-008d-65f5-24d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150409Z-15b8d89586flzzks5bs37v2b9000000004v000000000dtvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:09 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:09 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 28b65c2d-201e-0003-2d3f-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150409Z-r197bdfb6b4hsj5bywyqk9r2xw000000021g00000000a8b8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:09 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:09 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7a3803bc-a01e-0021-4af4-24814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150409Z-15b8d89586frzkk2umu6w8qnt80000000g6g000000003c7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:09 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 1b3e59d2-d01e-0017-05f8-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150409Z-17c5cb586f6mhqqb91r8trf2c800000001gg00000000aqk2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:09 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:09 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2ac474a9-a01e-0098-14a3-268556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150409Z-16849878b78s2lqfdex4tmpp7800000009fg0000000025v5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:09 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:10 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 97926059-b01e-0002-293b-261b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150410Z-r197bdfb6b47gqdjqh2kwsuz8c00000001600000000026pe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:10 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:10 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 42e95d53-401e-0047-28da-268597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150410Z-17c5cb586f6qkkscezt8hb00a000000002t000000000akec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:10 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:10 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: ff288f8c-c01e-007a-5a0e-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150410Z-17c5cb586f6w4mfs5xcmnrny6n000000024000000000bn0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:10 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:10 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 63249b2a-c01e-0046-2e2c-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150410Z-17c5cb586f67p8ffw0hbk5rahw000000030g000000000crx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:10 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:10 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:10 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 096df01f-c01e-0066-45fd-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150410Z-r197bdfb6b47gqdjqh2kwsuz8c000000011g00000000g2uw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:10 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:10 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:11 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150411Z-16849878b78bcpfn2qf7sm6hsn00000002cg000000003102 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:11 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:11 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150411Z-16849878b786fl7gm2qg4r5y7000000000xg00000000ma1z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:11 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:11 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 28e3a13f-d01e-0049-4f16-25e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150411Z-r197bdfb6b4jlq9hb8xf0re6t400000000s0000000008sg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:11 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:11 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: a90b7fa3-401e-005b-4246-269c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150411Z-15b8d89586fhl2qtatrz3vfkf000000006rg00000000213y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:11 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:11 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 23333e9c-201e-003f-1e18-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150411Z-17c5cb586f67p8ffw0hbk5rahw00000002sg00000000fwn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:11 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:11 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150411Z-16849878b78lhh9t0fb3392enw00000009bg000000000qku x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:12 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:12 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4104ef10-001e-0046-6521-26da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150412Z-17c5cb586f6hn8cl90dxzu28kw00000000mg000000004tne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:12 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:12 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:12 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150412Z-16849878b786lft2mu9uftf3y400000001wg00000000mn7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:12 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:12 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:12 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 28e57d84-e01e-003c-4a46-26c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150412Z-17c5cb586f6z6tw6g7cmdv30m800000001u0000000008pdr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:12 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:12 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:12 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:12 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f68a3f25-f01e-0052-02bd-259224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150412Z-16849878b78j7llf5vkyvvcehs00000001s000000000hp4m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:12 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:12 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:12 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 5a802a50-001e-0049-3f00-255bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150412Z-15b8d89586f2hk28h0h6zye26c000000033g00000000b33x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:12 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:12 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:13 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:12 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150412Z-16849878b786fl7gm2qg4r5y70000000011g000000003ykf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:13 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:12 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:12 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: baf401f8-c01e-00ad-1d9e-26a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150412Z-16849878b78rjhv97f3nhawr7s000000099g00000000hkdg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:13 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:13 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:13 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 9bebe7cf-201e-0033-1046-26b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150413Z-17c5cb586f6mkpfk79wxvcahc00000000140000000007rbx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:13 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:13 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:13 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c2e82b32-d01e-005a-2b27-267fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150413Z-17c5cb586f62blg5ss55p9d6fn00000001a0000000000f6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:13 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:13 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:13 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150413Z-16849878b78z5q7jpbgf6e9mcw00000009bg00000000shnc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:13 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:13 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:13 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150413Z-16849878b787wpl5wqkt5731b400000001ag00000000t31b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:13 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:13 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:13 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150413Z-16849878b78hz7zj8u0h2zng1400000009dg00000000hmgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:13 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:13 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:14 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: e6296ddc-301e-0052-0828-2665d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150414Z-17c5cb586f6zrq5bnguxgu7frc00000001a000000000hpb7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:14 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:13 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:14 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: dd040750-801e-0083-62fe-25f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150414Z-17c5cb586f6hhlf5mrwgq3erx800000001p000000000e6z5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:14 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:14 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:14 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:14 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 24d97458-301e-0051-6fef-2638bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150414Z-16849878b78tg5n42kspfr0x4800000000kg00000000rnu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-25 15:04:14 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:14 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:14 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 3010d1a1-b01e-0021-3bd5-25cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150414Z-15b8d89586fxdh48qknu9dqk2g00000004mg00000000ayec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:14 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:14 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:14 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 082c7638-801e-0067-65f2-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150414Z-15b8d89586ff5l62aha9080wv000000001v000000000gew3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:14 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:14 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:14 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150414Z-16849878b78fmrkt2ukpvh9wh400000009c0000000008d0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:14 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:14 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:14 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 98d07b8f-f01e-0096-1a27-2610ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150414Z-r197bdfb6b4jlq9hb8xf0re6t400000000ug000000001gbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:14 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:16 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:16 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: f9655ebd-a01e-0098-64f2-248556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150416Z-r197bdfb6b4hsj5bywyqk9r2xw00000001y000000000mm21 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:16 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:16 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:16 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: f29ba936-801e-0047-2ef2-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150416Z-17c5cb586f6mhqqb91r8trf2c800000001k0000000007435 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:16 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:16 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:16 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150416Z-16849878b78rjhv97f3nhawr7s000000097000000000rxxn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:16 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:16 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: cbb0b495-901e-005b-56e4-212005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150416Z-16849878b7867ttgfbpnfxt44s00000000d0000000009zu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:16 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:16 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150416Z-16849878b78j7llf5vkyvvcehs00000001u0000000009qhs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:16 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:16 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:16 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150416Z-16849878b78wv88bk51myq5vxc00000000wg00000000qssz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:17 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:16 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 22d1952d-101e-007a-6d50-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150417Z-17c5cb586f6w4mfs5xcmnrny6n000000022000000000g3x5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:16 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:16 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: b18c396c-401e-0015-7180-260e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150416Z-16849878b78x6gn56mgecg60qc00000002cg00000000skgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:17 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:16 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:17 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 95bc9e17-201e-0051-77f2-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150417Z-15b8d89586fst84k5f3z220tec0000000g7g0000000088zu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:17 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:16 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:17 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 0426689f-101e-007a-5ef8-25047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150417Z-17c5cb586f6gkqkwd0x1ge8t04000000011g000000004ggx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:17 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:17 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:17 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: ee736da1-b01e-001e-7be0-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150417Z-17c5cb586f6w4mfs5xcmnrny6n0000000260000000007zsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:17 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:17 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:17 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150417Z-16849878b78fssff8btnns3b14000000010g000000008aey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:17 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:17 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150417Z-16849878b785jrf8dn0d2rczaw00000001yg000000000up1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:17 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:17 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 92eac08a-601e-0001-29b2-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150417Z-16849878b78bcpfn2qf7sm6hsn00000002a000000000cdgu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:17 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:17 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:17 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 0cf7dd75-a01e-003d-3e63-2698d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150417Z-16849878b787psctgubawhx7k8000000096000000000esxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:17 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:18 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150418Z-16849878b78rjhv97f3nhawr7s000000096000000000u8ya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:18 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: de8fa6d8-101e-00a2-6a1c-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150418Z-16849878b78j7llf5vkyvvcehs00000001ug000000007e8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:18 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 9800c975-801e-008c-0e2c-267130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150418Z-r197bdfb6b4d9xksru4x6qbqr000000000rg000000002r9k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:18 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f1436c55-a01e-001e-41ef-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150418Z-16849878b785f8wh85a0w3ennn00000009bg00000000arkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:18 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150418Z-16849878b78k8q5pxkgux3mbgg00000009cg000000005k97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:19 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:19 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 02da5d6a-901e-0064-7bf4-24e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150419Z-r197bdfb6b429k2s6br3k49qn400000006ug0000000088z8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:19 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:19 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:19 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 28718399-201e-0003-7628-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150419Z-r197bdfb6b4bq7nf8mnywhn9e000000001n000000000kkh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:19 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:19 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:19 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 2dbb46b4-901e-0067-695f-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150419Z-16849878b78fssff8btnns3b1400000000zg00000000bgp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:19 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:19 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:19 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150419Z-16849878b78j5kdg3dndgqw0vg00000002c000000000g8qg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:19 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:19 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 26ef0c66-a01e-0070-7425-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150419Z-17c5cb586f6dsb4r19gvkc9r7s00000002vg000000005ngm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:19 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:20 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:20 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 36aee691-501e-0047-745d-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150420Z-16849878b78wv88bk51myq5vxc0000000120000000002784 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:20 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:20 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:20 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 8c1a2bd7-001e-008d-4028-26d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150420Z-r197bdfb6b4hsj5bywyqk9r2xw0000000220000000009e8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:20 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:20 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:20 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150420Z-16849878b787psctgubawhx7k8000000096g00000000ck81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 15:04:20 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:20 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:20 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150420Z-16849878b78j5kdg3dndgqw0vg00000002c000000000g8st x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:20 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:20 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:20 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150420Z-15b8d89586flzzks5bs37v2b9000000004yg000000007f7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:20 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:21 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:21 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 4673aea1-f01e-00aa-023d-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150421Z-17c5cb586f62blg5ss55p9d6fn000000012g00000000k066 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:21 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:21 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:21 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150421Z-16849878b785f8wh85a0w3ennn00000009b000000000bn7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:21 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:21 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:21 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:21 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: e081a540-501e-0035-2133-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150421Z-16849878b78rjhv97f3nhawr7s000000097000000000rydx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:21 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:21 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:21 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150421Z-16849878b78k46f8kzwxznephs000000098g00000000d50t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:21 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:22 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:22 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:22 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: f2380685-a01e-0002-0958-265074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150422Z-17c5cb586f6qt228zy1nuwhy2g00000002w0000000002wqw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:22 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:22 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:22 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: b3872a13-301e-0020-3ef3-246299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150422Z-r197bdfb6b4b4pw6nr8czsrctg00000001ag00000000a9bm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:22 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:22 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:22 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 12d17a45-e01e-0051-1e28-2684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150422Z-17c5cb586f6mhqqb91r8trf2c800000001k00000000074bk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:22 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:22 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:22 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:22 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 366b13b4-c01e-0082-1a80-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150422Z-16849878b78hz7zj8u0h2zng1400000009bg00000000qqxm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:22 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:22 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:22 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:22 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e20e9adc-401e-0083-18ae-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150422Z-16849878b785f8wh85a0w3ennn00000009cg0000000066wz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:22 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:23 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:23 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:23 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4769d5f8-401e-0067-710e-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150423Z-16849878b78bcpfn2qf7sm6hsn000000026000000000sm0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:23 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:23 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:23 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:23 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 27f7fbdb-301e-0096-2237-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150423Z-16849878b78q4pnrt955f8nkx8000000098000000000eaxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:23 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:23 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:23 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:23 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 9175bbc6-101e-0028-0656-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150423Z-r197bdfb6b4hsj5bywyqk9r2xw00000001zg00000000fsyb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:23 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:23 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:23 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:23 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150423Z-16849878b78c5zx4gw8tcga1b400000009a0000000006nug x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:23 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:24 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:24 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 8b819aaa-a01e-0084-563d-269ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150424Z-15b8d89586f8l5961kfst8fpb00000000b2g000000007vb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:24 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:24 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:24 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: c583980c-101e-008e-1237-26cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150424Z-17c5cb586f6f69jxsre6kx2wmc000000031000000000abbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:24 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 15:04:24 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 15:04:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 15:04:24 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 6be9265b-201e-003c-6328-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T150424Z-17c5cb586f6dsb4r19gvkc9r7s00000002v0000000006pkc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 15:04:24 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3224, Parent PID: 5460

General

Target ID:	0
Start time:	11:03:38
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6088, Parent PID: 3224

General

Target ID:	2
Start time:	11:03:40
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1744,i,10546162886671257772,14834690985333371397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1988, Parent PID: 5460

General

Target ID:	3
Start time:	11:03:42
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=policeanimalcontrol%40crgov.com&senderemailaddress=cvolkert%40douglas.co.us&senderorganization=AwGEAAAAAoAAAAADAQAAAHXZRXZEA8hHqoaYROHXUOBPVT1kb3VnbGFzY291bnR5Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdT%2fekjPWxxKrVolq5rjZNlDTj1Db25maWd1cmF0aW9uLENOPWRvdWdsYXNjb3VudHkub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cSA1PR09MB117383B75A18D75874E5517CE894F2%40SA1PR09MB11738.namprd09.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40douglascounty.onmicrosoft.com&consumerEncryption=false&senderorgid=d3204e62-5d1f-428d-90ae-ec95e74c18af&urldecoded=1&e4e_sdata=FR9cRcoDZqVue%2bO%2bn1%2fyYOLQ%2ftrZgZh5qJZyEpSyzZqwSQFyWEHIbcv9BkRXuzKjIXM5ypK41llMN1jbF%2bsdlodzrnfsIpi4rfunbLhjE3133ReR8wYmUjqLdoh7ByeCopvMq7WRUWQItwf%2f343DxcBR2m1hqAe%2b3pwawbGMtjhO5ppjoyWf5eLPecqX3o4uOlhguSCakSfP8oVo8tNVbmRWfD4NeWg6NL39fAHsRshF%2bR078m2jg%2fPnjueLfaIDOTn0jEH5fNZNVtk0Vi7foQhoZUbJRIJAZcP6qEQtk7gpaf8oLQndtEaUyuHwu%2f70fLcuhgB56L73j80mUESKEg%3d%3d"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage