Edit tour

Windows Analysis Report
DISCIPLIARIO.pdf

Overview

General Information

Sample name:	DISCIPLIARIO.pdf
Analysis ID:	1525250
MD5:	2db9192804b834cc11a26d5cea03fa34
SHA1:	47c45c48659f313096caa7fb3d33b869c177aaf7
SHA256:	e2b8fc7ca06e8c0ab145a39f82862c2377dde8f48d7a0ea9fd1aa96d2c1d9336
Tags:	pdfuser-Ana_Camacho
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Detected non-DNS traffic on DNS port

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 5400 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DISCIPLIARIO.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 2472 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7300 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1596,i,17713581128487194489,5467165853886830255,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 6208 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://apps.procuraduria.gov.co/webcert/ActNombre.aspx" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2204,i,485188839462988559,9413751380706042672,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx

HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49911 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49955 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50008 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:61425 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 96.17.64.189 96.17.64.189

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49911 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 96.17.64.189
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ogYVvcyAVk2YBOn&MD=MKaV32LZ HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /webcert/ActNombre.aspx HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /WEBCERT/Media/Style/Certificado.css HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /WEBCERT/Media/Style/jquery.realperson.css HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
Source: global traffic	HTTP traffic detected: GET /WEBCERT/Media/Scripts/jquery.js HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
Source: global traffic	HTTP traffic detected: GET /WEBCERT/Media/Scripts/jquery.realperson.js HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
Source: global traffic	HTTP traffic detected: GET /WEBCERT/WebResource.axd?d=aMv6dWoJNVK_s7FSAdfSIdp82UErXagsq5mBBotuhnkGKmgi5KYBtd_i9luCpVsdo1l8RZbwXjNyhhnOlZV5D_vy-a8KUthbzCfcHaF54wA1&t=638562381717896622 HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
Source: global traffic	HTTP traffic detected: GET /WEBCERT/WebResource.axd?d=b3PHbrCFCNXP35rg-mo31VC2mEj20s-yg6XRKoGdHAUT2jXVG0nlascVO1cf-mJnW4V9GxJZa12ol5IKe-yMcn4oyeTDTBeIVfyRvWPbwGU1&t=638562381717896622 HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
Source: global traffic	HTTP traffic detected: GET /WEBCERT/Media/Image/refresh.png HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /WEBCERT/WebResource.axd?d=aMv6dWoJNVK_s7FSAdfSIdp82UErXagsq5mBBotuhnkGKmgi5KYBtd_i9luCpVsdo1l8RZbwXjNyhhnOlZV5D_vy-a8KUthbzCfcHaF54wA1&t=638562381717896622 HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
Source: global traffic	HTTP traffic detected: GET /WEBCERT/WebResource.axd?d=b3PHbrCFCNXP35rg-mo31VC2mEj20s-yg6XRKoGdHAUT2jXVG0nlascVO1cf-mJnW4V9GxJZa12ol5IKe-yMcn4oyeTDTBeIVfyRvWPbwGU1&t=638562381717896622 HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
Source: global traffic	HTTP traffic detected: GET /WEBCERT/Media/Image/refresh.png HTTP/1.1Host: apps.procuraduria.gov.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ogYVvcyAVk2YBOn&MD=MKaV32LZ HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: apps.procuraduria.gov.co
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/8.5X-Powered-By: ASP.NETDate: Thu, 03 Oct 2024 21:42:30 GMTConnection: closeContent-Length: 1245Content-Security-Policy: default-src selfX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=block
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/8.5X-Powered-By: ASP.NETDate: Thu, 03 Oct 2024 21:42:30 GMTConnection: closeContent-Length: 1245Content-Security-Policy: default-src selfX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=block
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Thu, 03 Oct 2024 21:42:32 GMTConnection: closeContent-Length: 1245Content-Security-Policy: default-src selfX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=block

Source: 77EC63BDA74BD0D0E0426DC8F80085060.2.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: DISCIPLIARIO.pdf	String found in binary or memory: http://www.cdi.com.co/)
Source: DISCIPLIARIO.pdf	String found in binary or memory: http://www.robertpineda.com/)
Source: 2D85F72862B55C4EADD9E66E06947F3D0.2.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: DISCIPLIARIO.pdf	String found in binary or memory: https://apps.procuraduria.gov.co/webcert/ActNombre.aspx)
Source: DISCIPLIARIO.pdf	String found in binary or memory: https://www.google.com/intl/es/policies/privacy/)
Source: DISCIPLIARIO.pdf	String found in binary or memory: https://www.google.com/intl/es/policies/terms/)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49955 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50008 version: TLS 1.2

Source: classification engine

Classification label: clean2.winPDF@43/71@10/6

Source: DISCIPLIARIO.pdf	Initial sample: http://www.cdi.com.co/
Source: DISCIPLIARIO.pdf	Initial sample: https://apps.procuraduria.gov.co/webcert/actnombre.aspx
Source: DISCIPLIARIO.pdf	Initial sample: https://www.google.com/intl/es/policies/privacy/
Source: DISCIPLIARIO.pdf	Initial sample: http://www.robertpineda.com/
Source: DISCIPLIARIO.pdf	Initial sample: https://www.google.com/intl/es/policies/terms/
Source: DISCIPLIARIO.pdf	Initial sample: https://apps.procuraduria.gov.co/webcert/ActNombre.aspx
Source: DISCIPLIARIO.pdf	Initial sample: http://www.adobe.com/es/products/acrobat/readstep2.html

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-03 17-42-04-091.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DISCIPLIARIO.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1596,i,17713581128487194489,5467165853886830255,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://apps.procuraduria.gov.co/webcert/ActNombre.aspx"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2204,i,485188839462988559,9413751380706042672,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1596,i,17713581128487194489,5467165853886830255,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2204,i,485188839462988559,9413751380706042672,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: DISCIPLIARIO.pdf	Initial sample: PDF keyword /JS count = 0
Source: DISCIPLIARIO.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: DISCIPLIARIO.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: DISCIPLIARIO.pdf

Initial sample: PDF keyword obj count = 129

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
DISCIPLIARIO.pdf	0%	ReversingLabs

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://x1.i.lencr.org/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
apps.procuraduria.gov.co	52.142.17.242	true	false	unknown
x1.i.lencr.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://apps.procuraduria.gov.co/WEBCERT/Media/Style/jquery.realperson.css	false	unknown
https://apps.procuraduria.gov.co/WEBCERT/Media/Scripts/jquery.js	false	unknown
https://apps.procuraduria.gov.co/WEBCERT/WebResource.axd?d=aMv6dWoJNVK_s7FSAdfSIdp82UErXagsq5mBBotuhnkGKmgi5KYBtd_i9luCpVsdo1l8RZbwXjNyhhnOlZV5D_vy-a8KUthbzCfcHaF54wA1&t=638562381717896622	false	unknown
https://apps.procuraduria.gov.co/favicon.ico	false	unknown
https://apps.procuraduria.gov.co/WEBCERT/Media/Image/refresh.png	false	unknown
https://apps.procuraduria.gov.co/WEBCERT/Media/Scripts/jquery.realperson.js	false	unknown
https://apps.procuraduria.gov.co/WEBCERT/Media/Style/Certificado.css	false	unknown
https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx	false	unknown
https://apps.procuraduria.gov.co/webcert/ActNombre.aspx	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.2.dr	false	URL Reputation: safe	unknown
https://apps.procuraduria.gov.co/webcert/ActNombre.aspx)	DISCIPLIARIO.pdf	false		unknown
http://www.robertpineda.com/)	DISCIPLIARIO.pdf	false		unknown
https://www.google.com/intl/es/policies/privacy/)	DISCIPLIARIO.pdf	false		unknown
http://www.cdi.com.co/)	DISCIPLIARIO.pdf	false		unknown
https://www.google.com/intl/es/policies/terms/)	DISCIPLIARIO.pdf	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
52.142.17.242	apps.procuraduria.gov.co	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
96.17.64.189	unknown	United States	16625	AKAMAI-ASUS	false

Private

IP
192.168.2.16
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525250
Start date and time:	2024-10-03 23:41:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	DISCIPLIARIO.pdf
Detection:	CLEAN
Classification:	clean2.winPDF@43/71@10/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.43.60.134, 18.207.85.246, 34.193.227.236, 54.144.73.197, 107.22.247.231, 162.159.61.3, 172.64.41.3, 199.232.214.172, 2.23.197.184, 192.229.221.95, 2.19.126.143, 2.19.126.149, 172.217.16.195, 142.250.186.46, 108.177.15.84, 34.104.35.123, 142.250.185.234, 142.250.184.202, 142.250.186.170, 172.217.16.202, 142.250.186.106, 142.250.186.74, 172.217.16.138, 142.250.186.42, 142.250.184.234, 142.250.186.138, 142.250.185.170, 172.217.18.10, 142.250.181.234, 142.250.185.202, 216.58.206.42, 142.250.185.138, 142.250.185.74, 216.58.212.138, 142.250.185.106, 142.250.181.227, 216.58.206.78
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, translate.googleapis.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: DISCIPLIARIO.pdf

Simulations

Behavior and APIs

Time	Type	Description
17:42:14	API Interceptor	3x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Input	Output
URL: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx Model: jbxai	{ "brand":[], "contains_trigger_text":true, "trigger_text":"Formula rio de at enc ion de incident es", "prominent_button_name":"En via r", "text_input_field_labels":["Nombre:", "Tipo de Ident if i cac ion", "Num ero Ident if i cac ion", "Corre oEle tronic o:", "Observations:"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

Input

Output

URL: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx Model: jbxai

{
"brand":[],
"contains_trigger_text":true,
"trigger_text":"Formula rio de at enc ion de incident es",
"prominent_button_name":"En via r",
"text_input_field_labels":["Nombre:",
"Tipo de Ident if i cac ion",
"Num ero Ident if i cac ion",
"Corre oEle tronic o:",
"Observations:"],
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":true,
"has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/	Get hash	malicious	Unknown	Browse
	https://ipexcel-my.sharepoint.com/:u:/p/bhaskar/EXkHa_fTPjZKq-NlTqXIh7sBrIzBSy8pqbKPLGCEzX2rbA	Get hash	malicious	Unknown	Browse
	https://account.attributes.best/communication.aspx?now=yikes.bikes@saic.com	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	https://www.google.se/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp/s/link.mail.beehiiv.com/ss/c/u001.mtSAz3_WgZe6oQdiJX3I5Wky17Shk-m8xsMoltULMS3mzuBnL-QM9pVTUTxyWc1WyOovmb3Tk3NbIL2d2EAiLnALFxIwpw4Ea5BJnfNlGtrBBU_09OdOyxWIoH5OGk5krozZGyDG04GwV1A1i62V7ZHAsHD2HuXxLRbuTLwJ7nne5OoBikrWbP09wdmrU0Ux1PwQTxWW-4WqOLqDM-eOzn5OS5dc9AC-zsZGTpLU68lyIxLrcGUjprs01qDo_AF9kArbtDnZS59rgsqwPhVy55PUqH74R1QD9RQNSwa0QLjmNb6xFyDx4TkQQ9pmK-Sq/4a7/BVRt3igITgKfI8bq35Ml_w/h53/h001.yn5JRYzfVDjfbL0RFC-jVPp1XHK_GYk_K4Zr7dwWM3M	Get hash	malicious	Unknown	Browse
	teracopy.exe	Get hash	malicious	Unknown	Browse
	COVID-19.pdf	Get hash	malicious	PDFPhish	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	Play_VM-Now(Cbequipment)CLQD.html	Get hash	malicious	Unknown	Browse
	ORA _ Morningstar DBRS.html	Get hash	malicious	Unknown	Browse
96.17.64.189	Payout_receipt.pdf	Get hash	malicious	Unknown	Browse
	Iir6rxs8r6.exe	Get hash	malicious	Rhysida	Browse
	eEu5xPVQUo.exe	Get hash	malicious	Rhysida	Browse
	62-3590.pdf	Get hash	malicious	Unknown	Browse
	eEu5xPVQUo.exe	Get hash	malicious	Rhysida	Browse
	https://files.constantcontact.com/2d77228b901/702368a5-3f96-4cb6-b61d-aab8728be1ff.pdf	Get hash	malicious	Unknown	Browse
	SCAN_Client_No_XP9739270128398468932393.pdf	Get hash	malicious	HTMLPhisher	Browse
	HPDeskJet_043_SCAN.pdf	Get hash	malicious	Phisher	Browse
	Cbequipment-Voice Audio Interface.pdf	Get hash	malicious	HTMLPhisher	Browse
	E-294-SI+6056_20240904_EM_ANA+ESTEVES_3RD+QUARTER+CONTRACT+TERMS+AND+CONDITION+_+SI_C_DITIC_C.pdf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
bg.microsoft.map.fastly.net	9VgIkx4su0.exe	Get hash	malicious	SmokeLoader	Browse	199.232.210.172
	https://www.ccjm.org/highwire_log/share/mendeley?link=https://onpro.info	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://livelovelead.coach/wp-admin/readme.html	Get hash	malicious	Phisher	Browse	199.232.214.172
	https://u9313450.ct.sendgrid.net/ls/click?upn=u001.ZfA-2BqTl2mXIVteOCc-2BANg-2BtYQAbYWaU-2BKDDWa611GxHig-2BgElXnUy1eAOeNoTI9ToS9WuAxRUdR21lAIsTPE0g-3D-3Dd8kL_bf4JG6rVotaFp8XsYJMcbHq5p6ju5xz6OkJFWJQMhev1YsQkFFV7zJr96yz5256BnjjwP-2FrVNKeomJDukUeXnM2-2FUbrpvrFpNFdN8Hxo-2B8NA1G5PPzQiWnVnq4RPrf4MxseS-2FjeJBGe3OOYXNXxDmns1gfYeFwrIC6tXtQ3KJv23PKABAyqpBB-2FnsXl7BropPMbry14s3UYpaAeg1aJih0NQeQpVSOm5MBDYOXEHCyJCtLrpoW6SuZeJlGeeWyYAhbotSAdFsjwH5JN5fjIYp-2BMzHm9VPykPI2oeKmW91mIcQqO5YJ1dVv925b7N0T1v	Get hash	malicious	Unknown	Browse	199.232.214.172
	https://docsend.com/view/ws65kkaar2fwghua	Get hash	malicious	Unknown	Browse	199.232.214.172
	0a839761915d.exe	Get hash	malicious	LummaC	Browse	199.232.214.172
	http://bernas-medical-com.powerappsportals.com	Get hash	malicious	Unknown	Browse	199.232.214.172
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	199.232.210.172
	https://docs.google.com/forms/d/e/1FAIpQLSd11N0abxlW-jWhsgCqQSv4dirOC7CnOJxj0NYrOSmFOvEaMg/viewform?usp=pp_url	Get hash	malicious	HTMLPhisher	Browse	199.232.210.172
	payload.cmd	Get hash	malicious	Unknown	Browse	199.232.214.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://ipexcel-my.sharepoint.com/:u:/p/bhaskar/EXkHa_fTPjZKq-NlTqXIh7sBrIzBSy8pqbKPLGCEzX2rbA	Get hash	malicious	Unknown	Browse	13.107.136.10
	ORA _ Morningstar DBRS.html	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://www.salarytoolint.net/lam/c650d2e0-ca12-4bbd-8ff2-35011d35d0af/a717ea91-20df-42de-8c6b-2dc111827916/c05902dd-1112-4a4c-81f2-0bf48471902f/login?id=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	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://wvr4dgzxxavl6jjpq7rl.igortsaplin.pro/WFzFCiNx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	http://reviewnewdocuments.wordpress.com/	Get hash	malicious	Unknown	Browse	150.171.27.10
	75c6a7ee973b556a2a3914a9e4b18bc019636e70fb6f4c2f8c6f7da0af050cbb.7z	Get hash	malicious	Unknown	Browse	13.69.116.107
	http://bernas-medical-com.powerappsportals.com	Get hash	malicious	Unknown	Browse	13.107.253.72
	voicemaiVOIP_1002202474911222280000000082autoresponse.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.246.60
	Stager.exe	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://trello.com/c/HA4sCE32	Get hash	malicious	HTMLPhisher	Browse	150.171.28.10
AKAMAI-ASUS	msvcp110.dll	Get hash	malicious	LummaC	Browse	104.102.49.254
	msvcp110.dll	Get hash	malicious	LummaC	Browse	104.102.49.254
	teracopy.exe	Get hash	malicious	Unknown	Browse	184.28.90.27
	COVID-19.pdf	Get hash	malicious	PDFPhish	Browse	23.217.172.185
	carrier_ratecon.exe	Get hash	malicious	LummaC	Browse	23.192.247.89
	c84f2f8df965727bcdcc4de6beecf70c960ef7c885e77.dll	Get hash	malicious	LummaC	Browse	104.102.49.254
	75c6a7ee973b556a2a3914a9e4b18bc019636e70fb6f4c2f8c6f7da0af050cbb.7z	Get hash	malicious	Unknown	Browse	23.201.253.231
	0a839761915d.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	Activator by URKE v2.5.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	104.102.49.254

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	file.exe	Get hash	malicious	Credential Flusher	Browse	23.1.237.91
	https://auth-owlting.com/enterprise/core.js	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://wvr4dgzxxavl6jjpq7rl.igortsaplin.pro/WFzFCiNx	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	http://bernas-medical-com.powerappsportals.com	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwi8rNLSm_KIAxUlOa0GHbVBExQYABAAGgJwdg&co=1&ase=2&gclid=EAIaIQobChMIvKzS0pvyiAMVJTmtBh21QRMUEAAYASAAEgKymPD_BwE&ohost=www.google.com&cid=CAASJeRouvf6dR1Z030N43abeEvv2GJMSDfBYxMUuk6RVpzEUYpfVo4&sig=AOD64_3veiJdf46Mg_RU5mvf5TWesnE29A&q&nis=6&adurl&ved=2ahUKEwierczSm_KIAxWhD0QIHRYFNnUQ0Qx6BAgIEAE	Get hash	malicious	TechSupportScam	Browse	23.1.237.91
	Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	https://technopro-bg.com/redirect.php?action=url&goto=mairie-espondeilhan.com&osCsid=m24rb0l158b8m36rktotvg5ti2	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	23.1.237.91
	https://trello.com/c/HA4sCE32	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Stealc	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	https://novanutrix.com/vn%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/	Get hash	malicious	Unknown	Browse	4.175.87.197 20.109.210.53 184.28.90.27 13.107.246.45
	https://ipexcel-my.sharepoint.com/:u:/p/bhaskar/EXkHa_fTPjZKq-NlTqXIh7sBrIzBSy8pqbKPLGCEzX2rbA	Get hash	malicious	Unknown	Browse	4.175.87.197 20.109.210.53 184.28.90.27 13.107.246.45
	https://account.attributes.best/communication.aspx?now=yikes.bikes@saic.com	Get hash	malicious	Unknown	Browse	4.175.87.197 20.109.210.53 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	Credential Flusher	Browse	4.175.87.197 20.109.210.53 184.28.90.27 13.107.246.45
	https://www.google.se/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp/s/link.mail.beehiiv.com/ss/c/u001.mtSAz3_WgZe6oQdiJX3I5Wky17Shk-m8xsMoltULMS3mzuBnL-QM9pVTUTxyWc1WyOovmb3Tk3NbIL2d2EAiLnALFxIwpw4Ea5BJnfNlGtrBBU_09OdOyxWIoH5OGk5krozZGyDG04GwV1A1i62V7ZHAsHD2HuXxLRbuTLwJ7nne5OoBikrWbP09wdmrU0Ux1PwQTxWW-4WqOLqDM-eOzn5OS5dc9AC-zsZGTpLU68lyIxLrcGUjprs01qDo_AF9kArbtDnZS59rgsqwPhVy55PUqH74R1QD9RQNSwa0QLjmNb6xFyDx4TkQQ9pmK-Sq/4a7/BVRt3igITgKfI8bq35Ml_w/h53/h001.yn5JRYzfVDjfbL0RFC-jVPp1XHK_GYk_K4Zr7dwWM3M	Get hash	malicious	Unknown	Browse	4.175.87.197 20.109.210.53 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	Credential Flusher	Browse	4.175.87.197 20.109.210.53 184.28.90.27 13.107.246.45
	Play_VM-Now(Cbequipment)CLQD.html	Get hash	malicious	Unknown	Browse	4.175.87.197 20.109.210.53 184.28.90.27 13.107.246.45
	ORA _ Morningstar DBRS.html	Get hash	malicious	Unknown	Browse	4.175.87.197 20.109.210.53 184.28.90.27 13.107.246.45
	carrier_ratecon.exe	Get hash	malicious	LummaC	Browse	4.175.87.197 20.109.210.53 184.28.90.27 13.107.246.45
	https://www.ccjm.org/highwire_log/share/mendeley?link=https://onpro.info	Get hash	malicious	Unknown	Browse	4.175.87.197 20.109.210.53 184.28.90.27 13.107.246.45

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.213837958683621
Encrypted:	false
SSDEEP:	6:S4Iq2P92nKuAl9OmbnIFUt8DaZmw+DbkwO92nKuAl9OmbjLJ:SZv4HAahFUt8Da/+Db5LHAaSJ
MD5:	0A216DAE3DAE478B1B4E0A3C403935D1
SHA1:	4E233B72E6F57BC8228CAB92C63E9443318107DC
SHA-256:	D79FF09FFFDD1A226B966EE1734EF330409A442EB4724BAE814325E780451FE8
SHA-512:	DF1F1B791015B9553254B953CE6765E6ECFA208B7F1CF3591EFF6070C58C331036D492121F4DEA8152D7F69BD238B9D22FD5FAD38528C7550A7EF87D4147D84A
Malicious:	false
Reputation:	low
Preview:	2024/10/03-17:42:01.965 b04 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/03-17:42:01.967 b04 Recovering log #3.2024/10/03-17:42:01.968 b04 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.213837958683621
Encrypted:	false
SSDEEP:	6:S4Iq2P92nKuAl9OmbnIFUt8DaZmw+DbkwO92nKuAl9OmbjLJ:SZv4HAahFUt8Da/+Db5LHAaSJ
MD5:	0A216DAE3DAE478B1B4E0A3C403935D1
SHA1:	4E233B72E6F57BC8228CAB92C63E9443318107DC
SHA-256:	D79FF09FFFDD1A226B966EE1734EF330409A442EB4724BAE814325E780451FE8
SHA-512:	DF1F1B791015B9553254B953CE6765E6ECFA208B7F1CF3591EFF6070C58C331036D492121F4DEA8152D7F69BD238B9D22FD5FAD38528C7550A7EF87D4147D84A
Malicious:	false
Reputation:	low
Preview:	2024/10/03-17:42:01.965 b04 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/03-17:42:01.967 b04 Recovering log #3.2024/10/03-17:42:01.968 b04 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.155235814972752
Encrypted:	false
SSDEEP:	6:SUCZ9+q2P92nKuAl9Ombzo2jMGIFUt8DURfJZmw+DURf9VkwO92nKuAl9Ombzo23:S4v4HAa8uFUt8DI/+DQ5LHAa8RJ
MD5:	092F31B1406B7F57A2DE93CD18298AB3
SHA1:	95DDF5475FB1DF9787EC3D2FA235643737508290
SHA-256:	2ECDDA4F6D66DD4E48EE197C0CF5A15589FDBFC74E4BA9EDDD72122F587AE9A7
SHA-512:	72DA889533D71E6837ABD38E09D7F1C707DE0EF59EB64CA07353E01421A385B34C211745E7235BA654F64135C594416B2845CF9F451BB6CFF2FBDAA420C7CB16
Malicious:	false
Reputation:	low
Preview:	2024/10/03-17:42:02.053 1cd8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/03-17:42:02.054 1cd8 Recovering log #3.2024/10/03-17:42:02.054 1cd8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.155235814972752
Encrypted:	false
SSDEEP:	6:SUCZ9+q2P92nKuAl9Ombzo2jMGIFUt8DURfJZmw+DURf9VkwO92nKuAl9Ombzo23:S4v4HAa8uFUt8DI/+DQ5LHAa8RJ
MD5:	092F31B1406B7F57A2DE93CD18298AB3
SHA1:	95DDF5475FB1DF9787EC3D2FA235643737508290
SHA-256:	2ECDDA4F6D66DD4E48EE197C0CF5A15589FDBFC74E4BA9EDDD72122F587AE9A7
SHA-512:	72DA889533D71E6837ABD38E09D7F1C707DE0EF59EB64CA07353E01421A385B34C211745E7235BA654F64135C594416B2845CF9F451BB6CFF2FBDAA420C7CB16
Malicious:	false
Reputation:	low
Preview:	2024/10/03-17:42:02.053 1cd8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/03-17:42:02.054 1cd8 Recovering log #3.2024/10/03-17:42:02.054 1cd8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\879b0736-4dab-4f05-b3d8-00be7fe5a96f.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	508
Entropy (8bit):	5.057176382789865
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqQsEsBdOg2HExgcaq3QYiubxnP7E4T3OF+:Y2sRdsOpdMHER3QYhbxP7nbI+
MD5:	2BCC9B70689FEDCC08388E80120A079B
SHA1:	580BED4A79D96CAA810D70714C5877D8A903426F
SHA-256:	8BFE90B43B7BED670F59ADE77A8AFD7285864DCA8AA5D2E0C4F05A6F96220517
SHA-512:	58EBB999F7BF3BC336ED8CDC1A320AD998C2B72B32EB129CF12DD0D8138B9867BB485B88F4063FDE4C018EC8FF15F4DAC0689EFC78E72F35D9EAD296BCF22712
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13372551734513101","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":150609},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	508
Entropy (8bit):	5.057176382789865
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqQsEsBdOg2HExgcaq3QYiubxnP7E4T3OF+:Y2sRdsOpdMHER3QYhbxP7nbI+
MD5:	2BCC9B70689FEDCC08388E80120A079B
SHA1:	580BED4A79D96CAA810D70714C5877D8A903426F
SHA-256:	8BFE90B43B7BED670F59ADE77A8AFD7285864DCA8AA5D2E0C4F05A6F96220517
SHA-512:	58EBB999F7BF3BC336ED8CDC1A320AD998C2B72B32EB129CF12DD0D8138B9867BB485B88F4063FDE4C018EC8FF15F4DAC0689EFC78E72F35D9EAD296BCF22712
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13372551734513101","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":150609},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4509
Entropy (8bit):	5.23195490232649
Encrypted:	false
SSDEEP:	96:QqBpCqGp3Al+NehBmkID2w6bNMhugoKTNY+No/KTNcygLPGLLURkCjIPWIuIZ:rBpJGp3AoqBmki25ZEVoKTNY+NoCTNLv
MD5:	2013F8E1B8F0933EF49921257623B51F
SHA1:	3971B30A5925DA58A43F65E3544332A0D2FE4E26
SHA-256:	527A1B25E82C96CEDA09927200F8776CD0C1EA5438B58E40D6B8AD371AECD96D
SHA-512:	4E05F843E5823AC4DB1DED17BC795F7EE5B985B689B8E5DEE34141520D21F29A25EBB82898C66A119EA572FE867576C9E080D358AA3F5F9399609963C429A423
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-.1a.o................next-map-id.1.Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/.0.K..r................next-map-id.2.Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/.1.m.Fr................next-map-id.3.Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.2.8.o................next-map-id.4.Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/.3.A-N^...............Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/-j..^...............Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/[.\|.a...............Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/....a...............Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.W.@o................next-map-id.5.Pnamespace-8fb46ac3_c992_47ca_bb04_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.19267733802198
Encrypted:	false
SSDEEP:	6:SOM39+q2P92nKuAl9OmbzNMxIFUt8DOLJZmw+DOTN9VkwO92nKuAl9OmbzNMFLJ:SOVv4HAa8jFUt8DO9/+DOJ5LHAa84J
MD5:	1E4D71C36D27C90C8976F7814A5E7F2E
SHA1:	35D09C612F5DD732DE70748830D57109BE88BBD6
SHA-256:	BAB2892A40DE8DC05559B52A0BC25AA94B5AB97EE7C2705F2D0818BF8BDC17C5
SHA-512:	9EA4228BF4BCDDD55F849B5A49EDA0EAEBA404A0A537BCF6672FE73EE2E71DACFE50A247AAC73D6C857B8BAEB75089692AD03C10512F02776F91160F78F9CEEF
Malicious:	false
Preview:	2024/10/03-17:42:02.255 1cd8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/03-17:42:02.256 1cd8 Recovering log #3.2024/10/03-17:42:02.258 1cd8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.19267733802198
Encrypted:	false
SSDEEP:	6:SOM39+q2P92nKuAl9OmbzNMxIFUt8DOLJZmw+DOTN9VkwO92nKuAl9OmbzNMFLJ:SOVv4HAa8jFUt8DO9/+DOJ5LHAa84J
MD5:	1E4D71C36D27C90C8976F7814A5E7F2E
SHA1:	35D09C612F5DD732DE70748830D57109BE88BBD6
SHA-256:	BAB2892A40DE8DC05559B52A0BC25AA94B5AB97EE7C2705F2D0818BF8BDC17C5
SHA-512:	9EA4228BF4BCDDD55F849B5A49EDA0EAEBA404A0A537BCF6672FE73EE2E71DACFE50A247AAC73D6C857B8BAEB75089692AD03C10512F02776F91160F78F9CEEF
Malicious:	false
Preview:	2024/10/03-17:42:02.255 1cd8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/03-17:42:02.256 1cd8 Recovering log #3.2024/10/03-17:42:02.258 1cd8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241003214206Z-158.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 107 x -151 x 32, cbSize 64682, bits offset 54
Category:	dropped
Size (bytes):	64682
Entropy (8bit):	1.3402386310615488
Encrypted:	false
SSDEEP:	192:01KND4fmWJbe+piXgDTZ/xXuXjOvSlLSXzVqSCW7XkucQXHX2/tnXXHzSmXUXaOa:R2Ze+piCW
MD5:	00DAD4080A103E7F7EED846D20B06904
SHA1:	A50463758B95E7CC8E0EEDB95548D362D8159F72
SHA-256:	61399A1277B571F119096AE81B06A622A75CD9A1FFF880465998600D71A4CB0B
SHA-512:	B98BE528F8E10DCA18F066E66184EA521CC93E386A243FC1DC1EAFB942680180BEE277E498D5CD5CA80F943BAF4695901254D06C9EE34C861DD22D6FFEE341CF
Malicious:	false
Preview:	BM........6...(...k...i..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7673182398396405
Encrypted:	false
SSDEEP:	3:kkFklq/7MlXfllXlE/HT8k3jNNX8RolJuRdxLlGB9lQRYwpDdt:kKz/JT8SNMa8RdWBwRd
MD5:	7B5A932738AC56F4BA905B56BB4F6967
SHA1:	D22FB34E4BC087C60AF124C10BC3E84A5FEF8769
SHA-256:	95DEA3A6125291850DA46E6D37D427247664EC2AF0E52A789E7D80C4ED70385F
SHA-512:	71C2990750F11A881D743BD336083E70E8584C3FE2C2038D3637FC9C94D0695187B66EA6A5C2E17ADA876A7E3A5AFCD8D04AE5FAD8F3773AF77F73790F8E527D
Malicious:	false
Preview:	p...... ........Y.......(....................................................... ..........W....9K..............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.2418003062782916
Encrypted:	false
SSDEEP:	6:kKxSj9UswD8HGsL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:M6DImsLNkPlE99SNxAhUe/3
MD5:	42D875EAF13B85B452BBFDF5FE1147DE
SHA1:	7D3D0CB972B31FA3C34EA3CC2E751ECD21E9C0C5
SHA-256:	471161DC19EFB84032C5F8C2BB7F06CAA9BEAA6863694907A47F46670CA3CD32
SHA-512:	C96E9C1051B86EEB287ADF2F5E0F9B6B42259E3F2246C3D7768C25FDADB073ACC8E9A0520EFCC24045B45249C22276323DCC3E69A4FD07B6D9B10724B0ADC8EE
Malicious:	false
Preview:	p...... ........3j.@....(....................................................... ........G..@.......&......X........h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.3043301956593005
Encrypted:	false
SSDEEP:	6:YEQXJ2HXgpFfI9+TJR+FIbRI6XVW7+0YGHWxoAvJM3g98kUwPeUkwRe9:YvXKXgpWI90YpW7bGMbLUkee9
MD5:	4BCE4B5C7798C34B5BC3F2CC04C115CD
SHA1:	3D70520E1D48C5DB463B9208855536AA1543D119
SHA-256:	ACFFF35BE6B59A6A748E5674E1F3E2ED2A168AFCDC2E38A9A5C813DD2519967B
SHA-512:	2EAE3A54FBCF113C386EE7DBD7C2088E69BFC589D4AE639590D87BED981FED9AD06052419DBCEAFE7120BEA69FCE822A1A83317B11160B2FFA08658686D06FC2
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.2421192859172425
Encrypted:	false
SSDEEP:	6:YEQXJ2HXgpFfI9+TJR+FIbRI6XVW7+0YGHWxoAvJfBoTfXpnrPeUkwRe9:YvXKXgpWI90YpW7bGWTfXcUkee9
MD5:	8F18E5FD1618A272A15CED31BC8A4D78
SHA1:	0D67BB697E760334E3F4BB12D1C3A2EA997B04FF
SHA-256:	641CB4F3722A8B3CBAA31BCAFFD40E333AFB31CD56640CF9628DFB368ED58149
SHA-512:	6A7E03F661A5F375E1628C7CE4FACDF2C798EF7F6EF026DCCD2B417340A3BF18631D60C09FD739BEC2B826458C521115BEFDEDDD46F75C973F514F20BB59F05E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.2189338321013725
Encrypted:	false
SSDEEP:	6:YEQXJ2HXgpFfI9+TJR+FIbRI6XVW7+0YGHWxoAvJfBD2G6UpnrPeUkwRe9:YvXKXgpWI90YpW7bGR22cUkee9
MD5:	85CFAFBD37D54F7D16DDDCD53C3FDC68
SHA1:	6DB07C31757AFD431715B3E5DD1B618936C3BFC8
SHA-256:	A6911A03065FCE8EA25A3208F42CEF6241563CB1946B2F48E9D46BA3E6A3EBC6
SHA-512:	3FC73B83539D4C5162F5EA82C31A38CA89BEA05AAE448B1386104E8CF39C6B64F8603C2490BBA845383EC3052B30B444DEB4E734BA842F84B2C74F8B4BCC33A8
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.2811517332901525
Encrypted:	false
SSDEEP:	6:YEQXJ2HXgpFfI9+TJR+FIbRI6XVW7+0YGHWxoAvJfPmwrPeUkwRe9:YvXKXgpWI90YpW7bGH56Ukee9
MD5:	70E0C235DEC3B27E9ABA6F48523A4C4E
SHA1:	6EF344A7FF00DC07E97CC655906E188A2649E4F2
SHA-256:	034D8EDE1440A01ACAECB4B81701A600FF729D05E5C51D13FC9A61A3959A1487
SHA-512:	37CE3EA5F5602FC7D47A6A83E14DCC774272E337B078D1438E18EBE51BCE53EF81E1D4FE574921A752653BE5D78923FB4C3FFCCA91743DA05EAF20EC067C8F80
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1083
Entropy (8bit):	5.676533032398463
Encrypted:	false
SSDEEP:	24:Yv6Xg4I9liwpLgE6c3UDx7nnl0RCmK8czOCY4wgS7S:YvP9Mwhg1JaAh8cvYvFG
MD5:	F4B3CCEECF3724B8417AD215A408781E
SHA1:	42CF21F68C86B29F5A4F5293826284D4F26910F9
SHA-256:	B6719E9FF06FF23457AF4147C1E46128BAAA113AE176E221F44DE8ECF3CC3289
SHA-512:	016DE6E85F85F2A2ADBC8D5A0808846ADD7AAFE118FEA75E5394E07EE748F53335672B1D1A24D71877C0DA1633ADC479EC568DCEEE253167ABAEBB5B980D9D56
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"89628_277808ActionBlock_2","campaignId":89628,"containerId":"1","controlGroupId":"","treatmentId":"22b145c0-22bc-4bba-811f-7234f288595b","variationId":"277808"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQgZmlsZXMgdG8gYW5kIGZyb20gUERGXG53aXRob3V0IGxpbWl0cy4ifSwidGNhdElkIjoiUkdTMDM1MS1FTlUtQ29udHJvbCJ9","dataType":"applicatio

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1050
Entropy (8bit):	5.652381529661544
Encrypted:	false
SSDEEP:	24:Yv6Xg4I9liiVLgEF0c7sbnl0RCmK8czOCYHflEpwiV4S:YvP9MiFg6sGAh8cvYHWpwG
MD5:	1CA39CC2E48D7EE2FFF9BCF0EDA4DDF7
SHA1:	C9D1F3CF85E8D38BF0CDAE93C8173C12B660B096
SHA-256:	D05FD21350DA5CE0F6022793E676CFB6697595F071E65F34A055EF188974AEE3
SHA-512:	9CCD819476D4EB43D2D02F6D38B2AE4014E3A73488C8D01A3B346690EDA2B57D3B34ABDAA8FF373E7E87040CE32E3B8CF4CDB2A6158E7AF8BCB14C0F9053954B
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_0","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"0924134e-3c59-4f53-b731-add558c56fec","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuZm9ybXMgJiBhZ3JlZW1lbnRzLiJ9LCJ0Y2F0SWQiOm51bGx9","dataType":"application\/json","encodingScheme":true},"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.228821755425487
Encrypted:	false
SSDEEP:	6:YEQXJ2HXgpFfI9+TJR+FIbRI6XVW7+0YGHWxoAvJfQ1rPeUkwRe9:YvXKXgpWI90YpW7bGY16Ukee9
MD5:	5EF2CB5B090FE284EA1876CAA8F0EF23
SHA1:	B6942F57387DC8F784E71F35087B9CA5FB166ACA
SHA-256:	4D3D72168284C304CDA51811CEEE94DE40178EA2757EBCF7039C0C624D461374
SHA-512:	2E9DC9139A2272D6B2A8F505972BE6F91C62C603447AFDC77973319302907DA8BE0E50790C0FB7B802CE583A5EE7FBD3C6289BC6A3037BB13CCEA57D16C31763
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	5.681282422796013
Encrypted:	false
SSDEEP:	24:Yv6Xg4I9liP2LgE4cq/S70nl0RCmK8czOCAPtciGS7S:YvP9MPog9ohAh8cvA3G
MD5:	26A5D47CA0B88CF02FB863B081ADB676
SHA1:	B444301AA9B923CCD83015ED42B46D68C4BE428C
SHA-256:	FA5A75DB224EF2E609516DB56985B783A8EC7CB53D062DD3A53BBF4179E361D1
SHA-512:	55664D641DD8E309C181A48133DA2D334875BFAE60E79779556B0C9CC72971080133848D3CA6F8E8EDABC86A6F5E5B616D713B1640DF29515B0DE9FB98D30717
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"89628_277808ActionBlock_0","campaignId":89628,"containerId":"1","controlGroupId":"","treatmentId":"58886bd3-acd7-4f84-ae2e-6684bc127c41","variationId":"277808"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVkaXQgdGV4dCwgaW1hZ2VzLCBwYWdlcywgYW5kIG1vcmUuIn0sInRjYXRJZCI6IlJHUzAzNTEtRU5VLUNvbnRyb2wifQ==","dataType":"application\/json","encodingSch

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.6962595249697054
Encrypted:	false
SSDEEP:	24:Yv6Xg4I9lijKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK54S:YvP9MjEgqprtrS5OZjSlwTmAfSK5
MD5:	27D9EA144D66E89EC25EE1CFEE7209AA
SHA1:	0A0AA1D1C3CF81EE1F8E1376205E5F77A7B56520
SHA-256:	6FE75BC4D845ECD4104AFB4E514F657F820964C6755E45E675EA355DB098EEE8
SHA-512:	74EC6C451534BD96F5A287E0BE862614D3337413F49D6608CAC3B34585AC5C6AA3EE644686228DE0394BE650685A95BC57622B936EF5CB9CFFCC64EE23A7A61A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.236033046126933
Encrypted:	false
SSDEEP:	6:YEQXJ2HXgpFfI9+TJR+FIbRI6XVW7+0YGHWxoAvJfYdPeUkwRe9:YvXKXgpWI90YpW7bGg8Ukee9
MD5:	399AB369587A9BECABC086ECF3B557F5
SHA1:	073EAD6CE313BF64EB5747A5B639F81D2B31F32F
SHA-256:	669939DCC1E712E31C593F10BE01F70F9E32EA6302F4E5DE1B7E62D390F9BDD2
SHA-512:	EBADBD1E355461053946CCC8B799C0903BDB30D20BE55C297AC7EE998861D89479F7A7CD6358E4B5E6271239904A9D72CB76C81E3EB2C64D40623B781E295439
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.776353221964994
Encrypted:	false
SSDEEP:	24:Yv6Xg4I9li+rLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJNQS:YvP9M+HgDv3W2aYQfgB5OUupHrQ9FJ5
MD5:	C6B4EA6E5E1C4E88D4975F9430563DF7
SHA1:	8C4A172550C9578D042706FF9DF74E624BB9BDC3
SHA-256:	C6B61BAC342DF8A7EC51E080A95E19084A4434C29689A89631033AB7062E176C
SHA-512:	C5F4084BA484F9F47F553048857115B94F1D9C89DC4235E51F4670CB73C2FBFA80FB6A679D726A4C3B5742D5AF3C78E075236DA510D11040C85D4DF08834A7B6
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.220019779222604
Encrypted:	false
SSDEEP:	6:YEQXJ2HXgpFfI9+TJR+FIbRI6XVW7+0YGHWxoAvJfbPtdPeUkwRe9:YvXKXgpWI90YpW7bGDV8Ukee9
MD5:	D9C81CE7F8614570A517ACDA35881EF4
SHA1:	A73667F20EEC5396BD465053E92077C9311F480E
SHA-256:	521E44067E65821380072A2293605802FDCEB0C3FBAF5866A95ABF8DC5E5467E
SHA-512:	17835DA8574E1091C5F4CF99037146B78BC1F79C8EC27CF19944378D6F3D9EF54E6EA046A8AD283BCB7E7BA5447BC4C54D5C8367CF5EF04E11F03BDCFBB6F9D6
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.221103465926327
Encrypted:	false
SSDEEP:	6:YEQXJ2HXgpFfI9+TJR+FIbRI6XVW7+0YGHWxoAvJf21rPeUkwRe9:YvXKXgpWI90YpW7bG+16Ukee9
MD5:	95B773BCAA8D678BE3EFDC1247F30832
SHA1:	382DAD7C85BEA8B976518056FE0D5549878CDACC
SHA-256:	6E4D7115D62CC358EFA221DAA22E8AF92BFCEDB720F57FEB269B6278C0FF412D
SHA-512:	6CB5069A7E8DC7B11FDE4767FA8D0EBAFE67E7527E560FAA35B9CBAE3614342C999E50E50C4A3AAC1260D27DA4DD1DFCCDBB12A544DCF0593F3FC9CBC7D8EE3D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1082
Entropy (8bit):	5.679068492998488
Encrypted:	false
SSDEEP:	24:Yv6Xg4I9li0amXayLgE7c9O47Naqnl0RCmK8czOC+w2E+tg8GS7S:YvP9MyBgZNOAh8cv+NKMG
MD5:	5F720F19F8F0D75EC0BBAC3F1916C764
SHA1:	BF66228CE8E819C1E0244224854BE710F4599643
SHA-256:	5F407DF22F1606FCFCCAEE607DF6EA7A2684E32411A87EAFEE28565C607A86E7
SHA-512:	2FDB8162DFD499D8344169E6F3C4A11CB432492A6483D4B38D841925647A70CA9CD77875F45045571EC6807CDED6C4A09DD62ECD5AACF408DD6A9B58DFA53C8F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"89628_277808ActionBlock_1","campaignId":89628,"containerId":"1","controlGroupId":"","treatmentId":"a8b11c37-7d39-4b12-9d33-a040ee4d296b","variationId":"277808"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IlNlbmQgZG9jdW1lbnRzICYgZm9ybXNcbmZvciBmYXN0IGUtc2lnbmluZyBvbmxpbmUuIn0sInRjYXRJZCI6IlJHUzAzNTEtRU5VLUNvbnRyb2wifQ==","dataType":"application

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.194585220221115
Encrypted:	false
SSDEEP:	6:YEQXJ2HXgpFfI9+TJR+FIbRI6XVW7+0YGHWxoAvJfshHHrPeUkwRe9:YvXKXgpWI90YpW7bGUUUkee9
MD5:	689D62BE12AFA2970820FF25C8961677
SHA1:	73E14E476F14F0B8716D0F4AF78FE7636090972D
SHA-256:	2348A838103D124A7DEBA9ACE0FB3933F5FBFB51DAF3B2A9775856D034CF1DC3
SHA-512:	77400D4AAB2E9E229C3D5EF0DE88E0637B13F410A95513CEF685D929A079972B75F9AEA1EF9BBF273EDD9D6AF83B6A0E9D5B91CD9EA5C5DAF4E7053E95DA710A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.353461183779091
Encrypted:	false
SSDEEP:	12:YvXKXgpWI90YpW7bGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWkjiYS:Yv6Xg4I9li7168CgEXX5kcIfANh7S
MD5:	AD13444D53A56150EA8BDCB8DFF9203C
SHA1:	9EFF60010941FB7C2F38EFB950399A6DE69382A8
SHA-256:	56F510FF6853BC505A74B394385789984103D2A57A0BB16E272AEE760A9F35F7
SHA-512:	2589B8D183856BED1809CB2F192B6975EF717B3AF7AC5F407347819D1B2F51C81E3E5CA80B0B8C376D5B1211C892F17B991E2491140298B7CE6C9A4271BBE265
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f4874c8a-0d8f-4ca6-a1cd-c661c08f8390","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1728166117684,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1727991727721}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2818
Entropy (8bit):	5.123513562533218
Encrypted:	false
SSDEEP:	48:Yy1w6HHuBfzcaxgZMDF5tpkPCS8Z4x9lT:dwc6zrg6x5e124PR
MD5:	B130CE686C2003BFDE856A01D64F57CF
SHA1:	AB4C21A6A0BA87FE66DDFA3E9E879CFCCE3C7839
SHA-256:	D2C8E052B8751208E683B3703C12179E374E230273D95B622D38DFB74612F139
SHA-512:	BF95112D35585BCEE9B012843F05CEB1E54A498EBC5500EF8E21FEA5EA84A2726C1A4832332DFE8C68CC4501A9A08E755EC8EE3D793377A3AAB0A46F079E29B0
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"9677ec1966ea382e294a41599f7ee2a8","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1050,"ts":1727991727000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"94d3ca6fe6e2e246102a1f15e9296a1a","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1727991727000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"e41e951cb1c84066d15b8c8b0f4e03b3","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1082,"ts":1727991727000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"ca6ac175162332a4fc87b4d609d4adf0","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1083,"ts":1727991727000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"23fb06cda1878dc78867ba2a92c44341","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1062,"ts":1727991727000},{"id":"Edit_InApp_Aug2020","info":{"dg":"5b907ce9d4f4a0cba194c355a442d9fe","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":17

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9850475177828326
Encrypted:	false
SSDEEP:	24:TLHRx/XYKQvGJF7urs6I1RZKHs/Ds/SpJD8x04zJwtNBwtNbRZ6bRZ4kD8x0F:TVl2GL7ms6ggOVpt8ZzutYtp6P/82
MD5:	A1850FAF96031745E9B11BAA099883B4
SHA1:	11AA3EC8765B6A20A5BE71B32FAA9A977F0C95A4
SHA-256:	90F14A63AE66A163C18C78C900B2DC77179C8DD9615CBB04D3077CCF680AF178
SHA-512:	C1DD146ADA569E4CB780108E9F2E0205EEF7B478DF3B4C87F4E30E5B9DDEABC40A366F35B0C14D18F693D2DCC655621467774F4B1D0E83A05FD56E88F93C6099
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.3390278594160627
Encrypted:	false
SSDEEP:	24:7+tFxAD1RZKHs/Ds/SpJD8x0PzJwtNBwtNbRZ6bRZWf1RZKTqLBx/XYKQvGJF7ul:7MFxGgOVpt8CzutYtp6PMCqll2GL7msE
MD5:	D5065C65B818B556BD05452B95CB7CA2
SHA1:	AA869A16E4F69299AC534F1C6B33FE3430694812
SHA-256:	B2B7DB2DD45D4D619A88630AA4D8F4A08D8F613594B46C451C967D1432CC7701
SHA-512:	C77D55B23263E59790F918A90955982D8475D763DC686D89E1D837C0209CE41DEF4A62C98635BCDF56E35CDC055F20C515495AAE496DA55A0E6CD7D0C02ECCE9
Malicious:	false
Preview:	.... .c.....u.;:......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIfca64.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5177502348333967
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K82hlQqHlww:Qw946cPbiOxDlbYnuRKXhlX
MD5:	1AF476884617AB1AB5A416028F7371E8
SHA1:	F2FD7E0AEDF3286E8FB7A9353231C3A18BEEBAB7
SHA-256:	E2E27D34306B79BA4476CC9DF5C5191ED8751960821C507FE7BD8B982146A0E9
SHA-512:	E4F0C990C12E1E335DC5DC53965D02282B984D46BE27A7D4435E6DA2434602797BEAAA3CF0984347D359FFE4DF38E72F26AE85BBCFFDF2259DD0E3076DC69D8D
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .0.3./.1.0./.2.0.2.4. . .1.7.:.4.2.:.0.9. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-03 17-42-04-091.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.376360055978702
Encrypted:	false
SSDEEP:	384:6b1sdmfenwop+WP21h2RPjRNg7JjO2on6oU6CyuJw1oaNIIu9EMuJuF6MKK9g9JQ:vIn
MD5:	1336667A75083BF81E2632FABAA88B67
SHA1:	46E40800B27D95DAED0DBB830E0D0BA85C031D40
SHA-256:	F81B7C83E0B979F04D3763B4F88CD05BC8FBB2F441EBFAB75826793B869F75D1
SHA-512:	D039D8650CF7B149799D42C7415CBF94D4A0A4BF389B615EF7D1B427BC51727D3441AA37D8C178E7E7E89D69C95666EB14C31B56CDFBD3937E4581A31A69081A
Malicious:	false
Preview:	SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:961+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.326888681376477
Encrypted:	false
SSDEEP:	384:tXiT4T5mgm2mTmTmmLm1jmhmQlqlKl7l9lutZAlALAXpIpcpVpupXol8lAlSOWO/:pwS
MD5:	B56CFFAC13F0CFF8443DEC3A9318BB76
SHA1:	F2601D83B5928AD5CA8502DD0C4EA8656B15FE86
SHA-256:	81F5D9CE14619B56F4E4FBC5CF9D09BCA9505E99F659172800176732FF003241
SHA-512:	ACE496312995C343E057261604D74D957424A69B46FE8902738E1F62677349D0D555EDABB07A7AA26427AC6B3D0680AB3765D755FA42CE505E4A9DF9908CA87F
Malicious:	false
Preview:	SessionID=dce66923-2029-4a2d-855b-b41a994445d8.1727991724122 Timestamp=2024-10-03T17:42:04:122-0400 ThreadID=6604 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=dce66923-2029-4a2d-855b-b41a994445d8.1727991724122 Timestamp=2024-10-03T17:42:04:126-0400 ThreadID=6604 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=dce66923-2029-4a2d-855b-b41a994445d8.1727991724122 Timestamp=2024-10-03T17:42:04:126-0400 ThreadID=6604 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=dce66923-2029-4a2d-855b-b41a994445d8.1727991724122 Timestamp=2024-10-03T17:42:04:127-0400 ThreadID=6604 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=dce66923-2029-4a2d-855b-b41a994445d8.1727991724122 Timestamp=2024-10-03T17:42:04:127-0400 ThreadID=6604 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.387079424722637
Encrypted:	false
SSDEEP:	768:GLxxlyVUFcAzWL8VWL1ANSFld5YjMWLvJ8Uy++NSXl3WLd5WLrbhhVClkVMwDGbS:e
MD5:	0A97C64F201CB4EB29F61E4D4CF63792
SHA1:	1E73D2A57637C9FB49C7B7AD782F5426717DEE5F
SHA-256:	DAA67EE288DA433852AAFD3D9239FD7B0AE91EBD9B030D9A3341D319A4BF44C4
SHA-512:	1571657B0B295743457EB815D0C3A945AF033D76BB40783A8CB962F8AE14C26492879182D93A47AB17F0391BBF4A9BB19D16472502F56432B8CD58FC954BF9F9
Malicious:	false
Preview:	04-10-2023 02:39:31:.---2---..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : *************************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : ***********************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Starting NGL..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..04-10-2023 02:39:31:.Closing File..04-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\075d1b2d-073d-4b79-aead-c4b12c5e37aa.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/M7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WLaGZjZwYIGNPJe:RB3mlind9i4ufFXpAXkrfUs03WLaGZje
MD5:	716C2C392DCD15C95BBD760EEBABFCD0
SHA1:	4B4CE9C6AED6A7F809236B2DAFA9987CA886E603
SHA-256:	DD3E6CFC38DA1B30D5250B132388EF73536D00628267E7F9C7E21603388724D8
SHA-512:	E164702386F24FF72111A53DA48DC57866D10DAE50A21D4737B5687E149FF9D673729C5D2F2B8DA9EB76A2E5727A2AFCFA5DE6CC0EEEF7D6EBADE784385460AF
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\493e3e38-cea8-49ff-b1de-a5b8be1bc2a8.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6ZSWBlkipdjum21D1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3PjegfZS8lkipdj321DMNB1DofjgJJg
MD5:	F0D0ECAE1E5D07A2F3D08371DFED8CDF
SHA1:	05A0C4389DE443C2AB77F78D0D2B552260B84003
SHA-256:	CFA56E7EB28AF60F9CFFD8C53522932411CEDF776A809F8362614DAF61A568F9
SHA-512:	14E6138FE9FE3F22117BCCF8216DE03BC8539A413B81A691496A3C621CB6AD80746E86D6FCD75B2BE0FB70A14807CBBFBC70A2A6B5B2E2F4218C3A52A1F73D9F
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\93dc22f8-07b0-440d-ac12-a3a88bb3c629.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\9964245c-a7b4-442a-8e7a-884e4a3782d8.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xA7owWLaGZDwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:JVwWLaGZDwZGk3mlind9i4ufFXpAXkru
MD5:	18E3D04537AF72FDBEB3760B2D10C80E
SHA1:	B313CD0B25E41E5CF0DFB83B33AB3E3C7678D5CC
SHA-256:	BBEF113A2057EE7EAC911DC960D36D4A62C262DAE5B1379257908228243BD6F4
SHA-512:	2A5B9B0A5DC98151AD2346055DF2F7BFDE62F6069A4A6A9AB3377B644D61AE31609B9FC73BEE4A0E929F84BF30DA4C1CDE628915AC37C7542FD170D12DE41298
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 20:42:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9749897247454853
Encrypted:	false
SSDEEP:	48:8WT2dZWT5yCpJHjidAKZdA19ehwiZUklqehNy+3:8G3Dqy
MD5:	AE02B3AEF8926C4ED9405F179C7ED586
SHA1:	AE5094B46300BEDE7BCF5F8DBA94A3F2CC55A9E7
SHA-256:	540A62401EF93F41545CE1BD6E4C48A4DC96B895110CDF96FF06BBAAE0E84C00
SHA-512:	BA145EA36ADDA0FC20E9DAAFCB7E982655138D209E2FEC175D9D78A512F880F3018C1365165F44129C5EF27988A71E90CDF12B73567A0AB28DBA945A0C53768E
Malicious:	false
Preview:	L..................F.@.. ...$+.,......>%....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ICYA.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYN.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VCYN.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VCYN............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VCYO............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........'j>......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 20:42:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.986890470911186
Encrypted:	false
SSDEEP:	48:8T2dZWT5yCpJHjidAKZdA1weh/iZUkAQkqehay+2:8Z3x9QDy
MD5:	1C642ACF9CDFCFB02E211FD00F770259
SHA1:	04E910C20EB8B8621664C9F6E33EC447B824DBA5
SHA-256:	5BEEFFA84D5D39F45D262B5CBE7C91196817420D49EDF7298659136543A272C7
SHA-512:	E774986D029DCB08445002AFF1BDCB205306A5FA8C7980BC68C95779CEE2A54D87CB2CCEBB14BA278F5E7D491D09DE6EC52C08D6986A1125FBFC904030C49077
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....D2%....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ICYA.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYN.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VCYN.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VCYN............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VCYO............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........'j>......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00137152713771
Encrypted:	false
SSDEEP:	48:8xX2dZWT5yCpsHjidAKZdA14tseh7sFiZUkmgqeh7sQy+BX:8x93unuy
MD5:	7EDFB1B05B54131DEA2C958A90E4C27B
SHA1:	75B65444A7174B6F6780FF85ECA5C4FA9B3A7731
SHA-256:	0AB9E478A8D5BC550E357741D2F37E591C583FF31ADF3D42F4CC2766DBEB11AD
SHA-512:	2FFACA1BEE5CF8240FB3AE0EA4E7505DCDB84609D564A9D53FD8A3E587C4729689798E3EC62D8841E40353FAB4D850FEF642D2D8B0CB83FB63A5BA5836094D82
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ICYA.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYN.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VCYN.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VCYN............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........'j>......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 20:42:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9880635264967204
Encrypted:	false
SSDEEP:	48:8I2dZWT5yCpJHjidAKZdA1vehDiZUkwqehWy+R:8K3yYy
MD5:	7A1F504AEBCBF84496A8238122F15206
SHA1:	6B6CC7FE62A223939B70276D574DA6B35A655D1B
SHA-256:	14159DF655936AD947FB7B46CFA8DD538978CAA0370DFBE7889DEA8F6056CD36
SHA-512:	3DE91B82F540570C577649622D720A1CA7A04BA4DE44D8E19A57F8D72EDEAFF1A6FC37EE0066B907A33E5AD9D37D6DFA7209621AD7C84239AD2F26C7B491FF6D
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....X,%....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ICYA.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYN.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VCYN.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VCYN............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VCYO............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........'j>......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 20:42:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.975171870500779
Encrypted:	false
SSDEEP:	48:8H2dZWT5yCpJHjidAKZdA1hehBiZUk1W1qehky+C:8N3C9Ey
MD5:	13F9F2646ECA65461297B95FB8AC817C
SHA1:	DEFB5BB441A6F3D9509D9E441AC2647D86D54895
SHA-256:	376B893D293C8333E9E2BD7D4611511A3E2A551A746F44D4E88E199CF63D7BA0
SHA-512:	CE7A4B4821A923130796322EFE2EB05F299E15851567A254609F78A8CC547506DF1C10874D88B299BD181255015975086A9D54BCA201A8827B97BC0F9C4E3097
Malicious:	false
Preview:	L..................F.@.. ...$+.,....~j8%....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ICYA.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYN.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VCYN.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VCYN............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VCYO............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........'j>......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 20:42:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.984733916112966
Encrypted:	false
SSDEEP:	48:8O2dZWT5yCpJHjidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbuy+yT+:8U38T/TbxWOvTbuy7T
MD5:	F6B84C18C0D4DDB7D05064F712761E45
SHA1:	131A0954B29B1420A902023D9AF0F0E675A7F863
SHA-256:	CA93D577007E056893F17454DB10C89F22301A9649026D2EB47917A5D5A45080
SHA-512:	1CFA956040CA8612A9F2B429D2F59E00C0C5AD892349C018F16F22FB93B094E8DDC6AA5149706B145CA8888FA69218F7E48A12A04F9F244CCE9D69A0EDC4EC95
Malicious:	false
Preview:	L..................F.@.. ...$+.,....E` %....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ICYA.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCYN.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VCYN.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VCYN............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VCYO............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........'j>......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1245
Entropy (8bit):	5.462849750105637
Encrypted:	false
SSDEEP:	24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5
MD5:	5343C1A8B203C162A3BF3870D9F50FD4
SHA1:	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D
SHA-256:	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
SHA-512:	E0F50ACB6061744E825A4051765CEBF23E8C489B55B190739409D8A79BB08DAC8F919247A4E5F65A015EA9C57D326BBEF7EA045163915129E01F316C4958D949
Malicious:	false
URL:	https://apps.procuraduria.gov.co/WEBCERT/Media/Scripts/jquery.realperson.js
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1758
Entropy (8bit):	7.859371317994886
Encrypted:	false
SSDEEP:	24:PjhxnX7NSQP6KZ22eiwsZUUsft/LargNGHxMmG9D2b/VMafuJTTwUKtDhvdfK:LX7RP6K1wIAt/EamG9D0VJcsXtDrK
MD5:	B1BF332FCAFBF82D01C494F3652F983A
SHA1:	B393CFAE5FD399CFA59C3CEA0946833BAFB82B49
SHA-256:	8F6F708AC605F64CC2454D49096D7E2BFA0A2452316DA68797C15F61D6B371CD
SHA-512:	C78496CFF2008DBF0B21C9915E3701141376031F688F05F664AE3017AF91084CE31A9947D81BD7C2612704EBC73D07AD4A3DC2B06538A731823A499B3FDA7E9B
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATX...{.Tg....;......aw..t+..Ic.j54R#bLL.7....D.m......T...iL...n..$..V.+.Tc)....0...{....9......Xx._Nf.....}....".\.....G}k.R.m.....!)...sK.T<?15.2.....7^._{........Y6n..........U.b!.;.'.#!.=...h....\..T.p......f..u......@,.0rp..8.......=...J/~...+....w,. bI.<.4Z.f.....S.......!.<.G.H)....8._.A]M..%...cY[..'.46.......Sw=..[...\.t.F:W47.x.-.O..e.d.p\..).B...Xk.Z......Co~.....vm....W..O....b@...l.L...Q.[7.}.;^.~..zw.I~.#..."c.....1.+,.T`..R......Xs&.......`.....X.......N.........)W..........:..GH....\|..8..q.....[;).&...b1.....}..0q..j.1o.J9.JJ..R........U{^....f...w.;......<g......R.....5.Xy}.....Or..........A...HueZ..q...C.^....pb........KRJwd....s....QA9g.^=k...............#.....(.:s.x6..b#Fa.n......H..B..w......3.._,...q....2:.?c.....B..q.p.!.zC..K.;.x.!/..;..n..v......... .%......X#..4..1S*.&.0Q...!,L.JEfF.J.J#....7.s......H.3.v...'.i.nE'..b1.cR..L..L.Ro..{w0.....,.3..;.s71.o4eR.PEY.tV+.U

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.555990915760026
Encrypted:	false
SSDEEP:	3:xPUkvSdyPGUfhSIFiutKnSjzwYn:xPUkRnSTnSjUY
MD5:	96BD6DA4385585E43933E013307C904D
SHA1:	E39511CCBB8F244DB08DA4401C682F96EE493EA4
SHA-256:	63C73ADE279BE30B09E97F1029723BF0F4D0D4273DA0F44DE1B46038A8F8DD33
SHA-512:	BEF9FA6A516BE05F3B726CA6144B95B980D3348CB7C59BB0741243DAD8188DA90C8E7DB48162DD7736AB197243ED0BB436336D5FE09FEF1585BA9E75C2E8536A
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwmVJ9aoigwYQBIFDVkgmwYSBQ2xQ698EgUN3d-sfBIFDeMG6CkSBQ1HoeZiEgUNJeQoPg==?alt=proto
Preview:	CjYKBw1ZIJsGGgAKBw2xQ698GgAKBw3d36x8GgAKBw3jBugpGgAKBw1HoeZiGgAKBw0l5Cg+GgA=

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10308
Entropy (8bit):	4.874470838839719
Encrypted:	false
SSDEEP:	96:eqa6Pih3iu5wrLeryIXbdUVJ+JzkwsupoAebn+bsidQH/I9vIS/IBucoyHtyuK08:ef6Cy4mz7+A2Q1kuK0X8NK/0O03b
MD5:	6883A88911D926ED85B00970B149769D
SHA1:	FFD54F54051BB456C672B9EA7DADB41D1EEAD1F3
SHA-256:	478B7739939A8AB7745C245F6E04EF2D190C3569343FB58E0793F7F1C92C13FB
SHA-512:	40A6B47008243377D4C95C5547D0AE9BBA47BF2E8711368A2BC440974825ABCB195782A8B756DF268B44A0F277CC7C7F7D96E76F5B07E7AC08D06AE1BCC0243D
Malicious:	false
URL:	https://apps.procuraduria.gov.co/WEBCERT/Media/Style/Certificado.css
Preview:	.@charset "utf-8";..../* Estilos PGN/.....card-header {.. text-align: center !important;.. font-size: 18px !important;.. color: #527194 !important;.. font-weight: bold !important;.. background-color: #FFFFFF !important;..}.....footerPGN {.. bottom: 0;.. width: 100%;.. height: 80px; / Height of the footer /.. background: #e5e4e4;.. align-content: center;.. text-align: center;..}......@charset "utf-8";..../ Estilos PGN*/....body {.. font: 14px Trebuchet MS,Lucida Sans Unicode,Arial,sans-serif;.. margin: 0px;.. padding: 0px;.. background-color: #ffffff;.. background-position: center center;.. background-repeat: repeat-y;..}.....radioboton {.. border: none;..}.....divContenedorPGN {.. margin: 0 auto;.. position: relative;.. text-align: left;.. width: 100%;.. background-position: center top;.. background-repeat: no-repeat;.. min-height: 600px;..}.....divEncabezadoPGN {.. position: relative;.. width: 1024p

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1245
Entropy (8bit):	5.462849750105637
Encrypted:	false
SSDEEP:	24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5
MD5:	5343C1A8B203C162A3BF3870D9F50FD4
SHA1:	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D
SHA-256:	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
SHA-512:	E0F50ACB6061744E825A4051765CEBF23E8C489B55B190739409D8A79BB08DAC8F919247A4E5F65A015EA9C57D326BBEF7EA045163915129E01F316C4958D949
Malicious:	false
URL:	https://apps.procuraduria.gov.co/WEBCERT/Media/Scripts/jquery.js
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1758
Entropy (8bit):	7.859371317994886
Encrypted:	false
SSDEEP:	24:PjhxnX7NSQP6KZ22eiwsZUUsft/LargNGHxMmG9D2b/VMafuJTTwUKtDhvdfK:LX7RP6K1wIAt/EamG9D0VJcsXtDrK
MD5:	B1BF332FCAFBF82D01C494F3652F983A
SHA1:	B393CFAE5FD399CFA59C3CEA0946833BAFB82B49
SHA-256:	8F6F708AC605F64CC2454D49096D7E2BFA0A2452316DA68797C15F61D6B371CD
SHA-512:	C78496CFF2008DBF0B21C9915E3701141376031F688F05F664AE3017AF91084CE31A9947D81BD7C2612704EBC73D07AD4A3DC2B06538A731823A499B3FDA7E9B
Malicious:	false
URL:	https://apps.procuraduria.gov.co/WEBCERT/Media/Image/refresh.png
Preview:	.PNG........IHDR... ... .....szz.....IDATX...{.Tg....;......aw..t+..Ic.j54R#bLL.7....D.m......T...iL...n..$..V.+.Tc)....0...{....9......Xx._Nf.....}....".\.....G}k.R.m.....!)...sK.T<?15.2.....7^._{........Y6n..........U.b!.;.'.#!.=...h....\..T.p......f..u......@,.0rp..8.......=...J/~...+....w,. bI.<.4Z.f.....S.......!.<.G.H)....8._.A]M..%...cY[..'.46.......Sw=..[...\.t.F:W47.x.-.O..e.d.p\..).B...Xk.Z......Co~.....vm....W..O....b@...l.L...Q.[7.}.;^.~..zw.I~.#..."c.....1.+,.T`..R......Xs&.......`.....X.......N.........)W..........:..GH....\|..8..q.....[;).&...b1.....}..0q..j.1o.J9.JJ..R........U{^....f...w.;......<g......R.....5.Xy}.....Or..........A...HueZ..q...C.^....pb........KRJwd....s....QA9g.^=k...............#.....(.:s.x6..b#Fa.n......H..B..w......3.._,...q....2:.?c.....B..q.p.!.zC..K.;.x.!/..;..n..v......... .%......X#..4..1S*.&.0Q...!,L.JEfF.J.J#....7.s......H.3.v...'.i.nE'..b1.cR..L..L.Ro..{w0.....,.3..;.s71.o4eR.PEY.tV+.U

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
URL:	https://apps.procuraduria.gov.co/WEBCERT/WebResource.axd?d=b3PHbrCFCNXP35rg-mo31VC2mEj20s-yg6XRKoGdHAUT2jXVG0nlascVO1cf-mJnW4V9GxJZa12ol5IKe-yMcn4oyeTDTBeIVfyRvWPbwGU1&t=638562381717896622
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	532
Entropy (8bit):	5.034699301668003
Encrypted:	false
SSDEEP:	12:Uu6WnhrPWgjfo0NqVPE39j4IZWcsFVehMQo4XGgfVN1yVxVeh/QA:l9FPq0N+83pWL7euQh19N1WxVeVQA
MD5:	9D5241B7D94E537BAB547BF80B712CF3
SHA1:	4D7ED408CCDC0787DBF5B311E56886DBDE3979A2
SHA-256:	BDFFCAA699E926FA02B6BCA0F3EFA755530DC3A06EAE692BEC3605DF43B60EAE
SHA-512:	A88BB41B82EB78B7F54D2501BAF60E08177F7031537B9D638AF58C8F5AC405B254C9DD774F741B560755DFFB5D6B88D65DBC19B7DA8975CB8F9107340FA09F7C
Malicious:	false
URL:	https://apps.procuraduria.gov.co/WEBCERT/Media/Style/jquery.realperson.css
Preview:	/* Real Person jQuery plugin styles v1.1.1. */...realperson-challenge {...display: block;...color: #000000;..}.....realperson-text {...font-family: "Courier New",monospace;...font-size: 8px;...font-weight: bold;...letter-spacing: -1px;...line-height: 3px;..}.....realperson-regen {...padding-top: 4px;.. padding-bottom: 8px;...font-size: 14px;...text-align: center;...cursor: pointer;..}.....realperson-disabled {...opacity: 0.5;...filter: Alpha(Opacity=50);..}.....realperson-disabled .realperson-regen {...cursor: default;..}..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (429), with CRLF line terminators
Category:	downloaded
Size (bytes):	12511
Entropy (8bit):	5.127243359171897
Encrypted:	false
SSDEEP:	384:MIdaT/VcAQALwQ3LmDTWD0F1kQdfsNtfnXoX+fAmLaq50v/oztYXLYPY1DLtV0B9:LOc+fX
MD5:	143CCB99E4B3BBA8C474E91BE254999F
SHA1:	D6A3BB51887B9A126915F9A1D9FC061F7054F22F
SHA-256:	C2880319013535A8FE372ABD731C50B01FDAF92D58597131393C975D0FF4E031
SHA-512:	36EB953BA4704B2032B8544E7F365727E96E83A87B867E77970E88452F3057651093CA79797654A14DD2FEED33B53C7657195421D0B2F28087374F7062447F21
Malicious:	false
URL:	https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx
Preview:	....<!DOCTYPE html>....<html xmlns="http://www.w3.org/1999/xhtml">..<head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title>....</title><link href="Media/Style/Certificado.css" rel="stylesheet" /><link href="Media/Style/jquery.realperson.css" rel="stylesheet" />.. <script src="Media/Scripts/jquery.js"></script>.. <script src="Media/Scripts/jquery.realperson.js"></script>.. <script type="text/javascript">.... function validarDatos(source, arguments) {.. var TipoId = document.getElementById("ddlTipoID");.. var valTipoId = TipoId[TipoId.selectedIndex].value;.... if (valTipoId == '1' \|\| valTipoId == '2') {.. var NumId = document.getElementById("txtNumID").value;.... if (isNaN(parseInt(NumId))) {.. arguments.IsValid = false;.. return;.. }.. }.. arguments.IsValid = true;.. }.. </script>..</head>..<body>..

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
URL:	https://apps.procuraduria.gov.co/WEBCERT/WebResource.axd?d=aMv6dWoJNVK_s7FSAdfSIdp82UErXagsq5mBBotuhnkGKmgi5KYBtd_i9luCpVsdo1l8RZbwXjNyhhnOlZV5D_vy-a8KUthbzCfcHaF54wA1&t=638562381717896622
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1245
Entropy (8bit):	5.462849750105637
Encrypted:	false
SSDEEP:	24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5
MD5:	5343C1A8B203C162A3BF3870D9F50FD4
SHA1:	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D
SHA-256:	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
SHA-512:	E0F50ACB6061744E825A4051765CEBF23E8C489B55B190739409D8A79BB08DAC8F919247A4E5F65A015EA9C57D326BBEF7EA045163915129E01F316C4958D949
Malicious:	false
URL:	https://apps.procuraduria.gov.co/favicon.ico
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Static File Info

General

File type:	PDF document, version 1.4, 1 pages
Entropy (8bit):	7.750722098748563
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	DISCIPLIARIO.pdf
File size:	95'245 bytes
MD5:	2db9192804b834cc11a26d5cea03fa34
SHA1:	47c45c48659f313096caa7fb3d33b869c177aaf7
SHA256:	e2b8fc7ca06e8c0ab145a39f82862c2377dde8f48d7a0ea9fd1aa96d2c1d9336
SHA512:	fef8e50d7fd5cda64bddd49060d13a5a2c2b65a374d4fe5becec7c4c258e73feeb2b3c0cb7b41ca9287a02cb0cf229212aedbce9d4c249f7109ed2ff16663026
SSDEEP:	1536:PViPMdLYULUai2fiIxGqiu5I1qifc6iSsi4BdnIScznQQ9DHg25l+OANlixB:9iPMCQUn2VbdK1qMZi3xdIScbX9DHgMD
TLSH:	B5939E24F98D8C8CFA82DA1AC5BD384E4E6DF61B96CD3884112C8B15F1469D57BA33C7
File Content Preview:	%PDF-1.4.%.....1 0 obj.<</Title (Consulta de Antecedentes)./Creator (Mozilla/5.0 $Windows NT 10.0; Win64; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/129.0.0.0 Safari/537.36)./Producer (Skia/PDF m129)./CreationDate (D:20240927202035+00'00')./Mo

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.4
Total Entropy:	7.750722
Total Bytes:	95245
Stream Entropy:	7.994139
Stream Bytes:	72832
Entropy outside Streams:	5.069311
Bytes outside Streams:	22413
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	129
endobj	129
stream	16
endstream	16
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	12
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5
7	0000000000000000	6348f04b47ffd30455e64a30287f7887
8	f2f81c78e0c2f0b8	0518ca08a2e0bd39fcf356ea25da1fc7
13	8280a2a2a2a280a2	e05026b4fc950dde19418dc0f0f0120d

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 3, 2024 23:42:03.374051094 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 3, 2024 23:42:03.374054909 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 3, 2024 23:42:03.467784882 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 3, 2024 23:42:05.109945059 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 3, 2024 23:42:05.110070944 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 3, 2024 23:42:09.165420055 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:09.165510893 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:09.165595055 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:09.167467117 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:09.167511940 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:09.834022999 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:09.834135056 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:09.868987083 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:09.869021893 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:09.869256973 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:09.926031113 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:09.999028921 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:10.039414883 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:10.190002918 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:10.190066099 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:10.190184116 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:10.190282106 CEST	49712	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:10.190327883 CEST	443	49712	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:10.232173920 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:10.232279062 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:10.233145952 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:10.233834982 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:10.233872890 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:10.868738890 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:10.868833065 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:10.870219946 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:10.870242119 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:10.870454073 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:10.871525049 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:10.919403076 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:11.145334959 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:11.145406008 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:11.145927906 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:11.146306992 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:11.146332026 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:11.146348953 CEST	49713	443	192.168.2.5	184.28.90.27
Oct 3, 2024 23:42:11.146356106 CEST	443	49713	184.28.90.27	192.168.2.5
Oct 3, 2024 23:42:13.889015913 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:13.889050961 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:13.890039921 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:13.890039921 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:13.890070915 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:14.596635103 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:14.596724033 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:14.598581076 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:14.598592997 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:14.598825932 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:14.647689104 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:15.095951080 CEST	49720	443	192.168.2.5	96.17.64.189
Oct 3, 2024 23:42:15.096004963 CEST	443	49720	96.17.64.189	192.168.2.5
Oct 3, 2024 23:42:15.096889019 CEST	49720	443	192.168.2.5	96.17.64.189
Oct 3, 2024 23:42:15.097296000 CEST	49720	443	192.168.2.5	96.17.64.189
Oct 3, 2024 23:42:15.097315073 CEST	443	49720	96.17.64.189	192.168.2.5
Oct 3, 2024 23:42:15.114052057 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.114098072 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.114175081 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.114566088 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.114588976 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.176129103 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:15.223402023 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.431325912 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.431360006 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.431368113 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.431417942 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:15.431428909 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.431452036 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.431462049 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.431483030 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.431526899 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.431526899 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:15.431526899 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:15.431540012 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.431545019 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.431601048 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:15.431601048 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:15.431611061 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.432041883 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.432136059 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:15.665987015 CEST	443	49720	96.17.64.189	192.168.2.5
Oct 3, 2024 23:42:15.666279078 CEST	49720	443	192.168.2.5	96.17.64.189
Oct 3, 2024 23:42:15.666311026 CEST	443	49720	96.17.64.189	192.168.2.5
Oct 3, 2024 23:42:15.667197943 CEST	443	49720	96.17.64.189	192.168.2.5
Oct 3, 2024 23:42:15.667263985 CEST	49720	443	192.168.2.5	96.17.64.189
Oct 3, 2024 23:42:15.669284105 CEST	49720	443	192.168.2.5	96.17.64.189
Oct 3, 2024 23:42:15.669359922 CEST	443	49720	96.17.64.189	192.168.2.5
Oct 3, 2024 23:42:15.669564009 CEST	49720	443	192.168.2.5	96.17.64.189
Oct 3, 2024 23:42:15.669575930 CEST	443	49720	96.17.64.189	192.168.2.5
Oct 3, 2024 23:42:15.710191011 CEST	49720	443	192.168.2.5	96.17.64.189
Oct 3, 2024 23:42:15.765193939 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.765285015 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.766663074 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.766695023 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.767136097 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.769269943 CEST	443	49720	96.17.64.189	192.168.2.5
Oct 3, 2024 23:42:15.769340038 CEST	443	49720	96.17.64.189	192.168.2.5
Oct 3, 2024 23:42:15.769417048 CEST	49720	443	192.168.2.5	96.17.64.189
Oct 3, 2024 23:42:15.770020962 CEST	49720	443	192.168.2.5	96.17.64.189
Oct 3, 2024 23:42:15.770041943 CEST	443	49720	96.17.64.189	192.168.2.5
Oct 3, 2024 23:42:15.775649071 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.819453955 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.874161959 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.874222040 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.874265909 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.874291897 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.874332905 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.874351025 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.874385118 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.925034046 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:15.925075054 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.925091982 CEST	49714	443	192.168.2.5	20.109.210.53
Oct 3, 2024 23:42:15.925097942 CEST	443	49714	20.109.210.53	192.168.2.5
Oct 3, 2024 23:42:15.959790945 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.959851980 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.959891081 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.959908009 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.959939003 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.959976912 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.961293936 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.961333990 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.961380959 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.961394072 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:15.961426020 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:15.961443901 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.056087971 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.056124926 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.056174040 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.056210995 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.056229115 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.056271076 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.056819916 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.056842089 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.056893110 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.056900024 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.056921005 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.056948900 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.057420969 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.057446003 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.057511091 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.057517052 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.057562113 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.058368921 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.058410883 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.058442116 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.058453083 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.058480024 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.058590889 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.143210888 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.143243074 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.143286943 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.143313885 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.143341064 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.143534899 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.143891096 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.143913031 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.143959045 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.143969059 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.143994093 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.144012928 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.144705057 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.144722939 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.144779921 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.144789934 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.144818068 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.144968987 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.145374060 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.145395041 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.145462036 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.145472050 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.145499945 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.145519018 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.145734072 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.145752907 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.145821095 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.145832062 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.145884037 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.146689892 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.146713972 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.146745920 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.146755934 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.146781921 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.146800041 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.147227049 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.147304058 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.147313118 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.147336006 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.147371054 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.147428036 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.147428989 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.147428989 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.198098898 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.198188066 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.198272943 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.199943066 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.199964046 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.200088024 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.200263977 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.200295925 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.200886011 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.200927019 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.200978041 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.201294899 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.201308012 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.202706099 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.202796936 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.202878952 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.203079939 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.203116894 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.203841925 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.203901052 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.203965902 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.204065084 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.204106092 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.204180002 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.204205036 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.366475105 CEST	49721	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.366563082 CEST	443	49721	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.845508099 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.846730947 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.848355055 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.853507042 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.853580952 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.855657101 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.855671883 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.856084108 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.856137991 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.856394053 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.856404066 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.856890917 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.856904984 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.857192993 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.857197046 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.867468119 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.867909908 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.867990971 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.869230032 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.869242907 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.886714935 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.887247086 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.887265921 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.887640953 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.887650967 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.950792074 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.950813055 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.950910091 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.950908899 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.950969934 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.951117039 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.951152086 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.951179028 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.951191902 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.951627016 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.951659918 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.951750994 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.951888084 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.951926947 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.952598095 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.952734947 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.952941895 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.953167915 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.953178883 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.953193903 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.953198910 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.959558010 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.959619999 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.959769011 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.960576057 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.960593939 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.960808039 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.960834980 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.960843086 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.961035967 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.961047888 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.961415052 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.961477041 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.961570024 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.961735964 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.961764097 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.992535114 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.992589951 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.992677927 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.992698908 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.992760897 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.992799044 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.992880106 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.992880106 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.992896080 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.992919922 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.994543076 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.994555950 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.994632006 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.994651079 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.994932890 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.994963884 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.994985104 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.995085955 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.995110035 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.995174885 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.996782064 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.996809006 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.997047901 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.997164011 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.997188091 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.997941017 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.997952938 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:16.998023987 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.998250961 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:16.998264074 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.712867975 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.713587999 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:17.713602066 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.715013981 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:17.715019941 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.715125084 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.715538979 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:17.715609074 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.715837955 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:17.715852022 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.716588020 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.716943979 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:17.717000961 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.717232943 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:17.717246056 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.719108105 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.719134092 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.719450951 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:17.719465017 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.719818115 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:17.719827890 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.719928980 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:17.719940901 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:17.720215082 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:17.720218897 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069047928 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069058895 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069067955 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069098949 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069112062 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069165945 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.069169044 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069179058 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069185972 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069220066 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.069253922 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.069274902 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069287062 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069335938 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.069448948 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.069449902 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.069470882 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069479942 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.069484949 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069818974 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.069835901 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.069864035 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.069869995 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.070086956 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.070086956 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.070091963 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.070099115 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.070888042 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.070929050 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.073060989 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.073066950 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.073076963 CEST	49734	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.073080063 CEST	443	49734	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.076881886 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.076971054 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.077061892 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.077603102 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.077649117 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.077874899 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.078156948 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.078193903 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.079309940 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.079319954 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.079401970 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.079665899 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.079684019 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.079761982 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.079787016 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.079847097 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.079862118 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.079863071 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.080111980 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.080136061 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.080737114 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.080761909 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.081085920 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.081231117 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.081243038 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.728652954 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.729528904 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.729605913 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.730216980 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.730228901 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.730931997 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.731470108 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.731549025 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.732023954 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.732038021 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.733094931 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.733493090 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.733508110 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.734014988 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.734025002 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.734349012 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.734705925 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.734721899 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.735188961 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.735199928 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.739689112 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.740108013 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.740132093 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.740712881 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.740716934 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.826392889 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.826556921 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.826656103 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.826900005 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.826950073 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.826988935 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.827006102 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.831156015 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.831248045 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.831393003 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.831496000 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.831605911 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.831636906 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.831644058 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.831710100 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.831811905 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.831829071 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.831852913 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.831862926 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.834651947 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.834672928 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.834930897 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.835136890 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.835154057 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.835176945 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.835191965 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.835247993 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.835525036 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.835572958 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.835607052 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.835623980 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.838051081 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.838083982 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.838305950 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.838640928 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.838653088 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.838810921 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.838937998 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.839005947 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.839092016 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.839102983 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.839112043 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.839116096 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.841856003 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.841909885 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.841968060 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.842140913 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.842156887 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.844425917 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.844472885 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.844544888 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.844712973 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.844732046 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.844754934 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.844765902 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.847172022 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.847198009 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:18.847290039 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.847513914 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:18.847528934 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.513410091 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.514014006 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.514035940 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.514095068 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.514678955 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.514686108 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.514914036 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.514926910 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.515429974 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.515435934 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.516820908 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.517076969 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.517134905 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.517544031 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.517558098 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.520458937 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.520791054 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.520867109 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.521356106 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.521368980 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.529463053 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.529849052 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.529865980 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.530422926 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.530431032 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.612502098 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.612565041 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.612624884 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.612889051 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.612903118 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.612915993 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.612921000 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.613240004 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.613301992 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.613414049 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.614161015 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.614181042 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.614193916 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.614198923 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.617079020 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.617101908 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.617132902 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.617170095 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.617208958 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.617213964 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.617239952 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.617300034 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.617417097 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.617424011 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.617429018 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.617466927 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.617466927 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.617502928 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.617513895 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.617526054 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.617532015 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.620042086 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.620115042 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.620249987 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.620354891 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.620383024 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.624892950 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.625016928 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.625081062 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.625140905 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.625164986 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.625189066 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.625200987 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.627141953 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.627228975 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.627367973 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.627465963 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.627487898 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.631098986 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.631239891 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.631308079 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.631345034 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.631345987 CEST	49741	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.631360054 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.631378889 CEST	443	49741	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.633816957 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.633838892 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:19.633907080 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.634027004 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:19.634054899 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.274914026 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.306432009 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.306454897 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.306888103 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.306893110 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.330586910 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.331121922 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.331195116 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.331439972 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.331454992 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.331598043 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.331893921 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.331971884 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.332168102 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.332181931 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.333168983 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.333442926 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.333515882 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.333709955 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.333723068 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.334424973 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.334681034 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.334711075 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.334949970 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.334959984 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.401454926 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.401505947 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.401602983 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.401945114 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.401962996 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.401978016 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.401984930 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.405530930 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.405606985 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.405714989 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.405908108 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.405936956 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.432712078 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.432800055 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.432934046 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.433039904 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.433039904 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.433074951 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.433098078 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.435430050 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.435483932 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.435518026 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.435641050 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.435672045 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.435708046 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.435730934 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.435745955 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.435848951 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.435884953 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.435909033 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.435924053 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.436837912 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.436969995 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.437549114 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.437608957 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.437640905 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.437670946 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.437740088 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.437740088 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.437764883 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.437766075 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.437777042 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.437788963 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.437805891 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.437819958 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.438976049 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.439001083 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.439069986 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.439256907 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.439269066 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.440052986 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.440061092 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.440212965 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.440300941 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.440309048 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.440700054 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.440722942 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:20.440804958 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.440977097 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:20.441004992 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.049973011 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.050648928 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.050728083 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.051444054 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.051459074 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.086848021 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.087301970 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.087340117 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.087714911 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.087723017 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.099946976 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.100348949 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.100368023 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.100759029 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.100769997 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.105113029 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.105452061 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.105468035 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.105865002 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.105869055 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.109926939 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.110219955 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.110233068 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.110596895 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.110600948 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.151937962 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.152009964 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.152081013 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.152292013 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.152292013 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.152342081 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.152368069 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.154738903 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.154793978 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.154866934 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.154987097 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.155005932 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.186877966 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.187031031 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.187107086 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.187222004 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.187263966 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.187292099 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.187306881 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.189527988 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.189620018 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.189752102 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.189866066 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.189899921 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.200743914 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.200802088 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.200856924 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.200968027 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.200985909 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.201009035 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.201019049 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.202821970 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.202853918 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.202920914 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.203021049 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.203046083 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.205204964 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.205374002 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.205430031 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.205452919 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.205462933 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.205472946 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.205477953 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.207158089 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.207182884 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.207261086 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.207345963 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.207361937 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.212996006 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.213140965 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.213201046 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.213217974 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.213222027 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.213253021 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.213255882 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.214952946 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.214962959 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.215037107 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.215125084 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.215141058 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.788398981 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.788893938 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.788952112 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.789385080 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.789397955 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.836092949 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.836839914 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.836904049 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.836966991 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.836981058 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.840877056 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.841125965 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.841135025 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.841420889 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.841425896 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.853296041 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.853527069 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.853547096 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.853892088 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.853902102 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.886590004 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.887053013 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.887068033 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.887298107 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.887307882 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.887896061 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.887938023 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.887999058 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.888151884 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.888185978 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.888211012 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.888223886 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.890655994 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.890755892 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.890851974 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.890985012 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.891021013 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.934587002 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.934736967 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.934900045 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.934900999 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.934900999 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.936913967 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.936963081 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.937060118 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.937195063 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.937225103 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.947246075 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.947307110 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.947360039 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.947546005 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.947546959 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.947577953 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.947603941 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.949100018 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.949161053 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.949239969 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.949345112 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.949378014 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.951796055 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.951946020 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.952014923 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.952052116 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.952052116 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.952069998 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.952090979 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.953779936 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.953862906 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.953949928 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.954061985 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.954097033 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.990317106 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.990492105 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.990551949 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.990588903 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.990607023 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.990629911 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.990642071 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.993323088 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.993351936 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:21.993422031 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.993609905 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:21.993621111 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.244741917 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.244811058 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.536283970 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.536818027 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.536863089 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.537225962 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.537239075 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.593605042 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.594068050 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.594105005 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.594444990 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.594455957 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.609571934 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.609899998 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.609930992 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.610220909 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.610227108 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.617925882 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.618187904 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.618211031 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.618463993 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.618469954 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.637273073 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.637321949 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.637381077 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.637516022 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.637537003 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.637552977 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.637564898 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.640254974 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.640294075 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.640376091 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.640521049 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.640531063 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.644568920 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.644865036 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.644872904 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.645219088 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.645222902 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.708148003 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.708302975 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.708369017 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.708503008 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.708524942 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.708539963 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.708547115 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.711333036 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.711438894 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.711716890 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.711716890 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.711807966 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.718509912 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.718555927 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.718770027 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.718770027 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.718770981 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.720614910 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.720719099 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.720812082 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.720942974 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.720977068 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.722686052 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.722827911 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.722889900 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.722935915 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.722935915 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.722959042 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.722980022 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.724553108 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.724642992 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.724728107 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.724833965 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.724868059 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.744245052 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.744409084 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.744488955 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.744635105 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.744647980 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.744657993 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.744663000 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.746351957 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.746382952 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:22.746457100 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.746555090 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:22.746594906 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.025788069 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.025866985 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.300709009 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.301264048 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.301285028 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.301727057 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.301733017 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.354964018 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.359436035 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.359487057 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.359937906 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.359951973 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.361737967 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.362262964 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.362310886 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.362716913 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.362729073 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.364867926 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.365214109 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.365262032 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.365561008 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.365572929 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.403604031 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.403649092 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.403698921 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.403810978 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.403826952 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.403845072 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.403848886 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.406271935 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.406341076 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.406441927 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.406569958 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.406599998 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.411071062 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.411350965 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.411416054 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.411684990 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.411695957 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.455343962 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.455394983 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.455535889 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.455588102 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.455588102 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.455624104 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.455646038 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.457593918 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.457639933 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.457720041 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.457839012 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.457871914 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.462277889 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.462407112 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.462471962 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.462523937 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.462523937 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.462558031 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.462579966 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.464319944 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.464346886 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.464410067 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.464504957 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.464518070 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.465161085 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.465289116 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.465349913 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.465399027 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.465399027 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.465431929 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.465452909 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.467014074 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.467020988 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.467209101 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.467209101 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.467226028 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.514834881 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.514902115 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.514964104 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.515052080 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.515072107 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.515095949 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.515110970 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.516855001 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.516881943 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:23.516958952 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.517098904 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:23.517115116 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.073566914 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.074292898 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.074357986 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.074812889 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.074826956 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.101434946 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.101888895 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.101947069 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.102330923 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.102344036 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.112504959 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.113001108 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.113015890 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.113359928 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.113364935 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.121102095 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.121376991 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.121386051 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.121701002 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.121705055 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.174525976 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.174669027 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.174725056 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.174784899 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.174925089 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.174947977 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.174962044 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.174978018 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.174988031 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.175003052 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.175359964 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.175368071 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.177501917 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.177536964 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.177623987 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.177752972 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.177766085 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.201874971 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.201939106 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.202012062 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.202150106 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.202173948 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.202189922 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.202197075 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.204765081 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.204858065 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.204952955 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.205100060 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.205137014 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.213656902 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.213733912 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.213790894 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.213891029 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.213891029 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.213908911 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.213917971 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.215920925 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.215943098 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.216031075 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.216171980 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.216197014 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.221443892 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.221524954 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.221587896 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.221638918 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.221638918 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.221652031 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.221659899 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.223323107 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.223349094 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.223417044 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.223532915 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.223543882 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.273296118 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.273365021 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.273446083 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.273564100 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.273610115 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.273638964 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.273654938 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.275907040 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.275954962 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.276031971 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.276166916 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.276185989 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.839479923 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.840399981 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.840442896 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.841013908 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.841022015 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.879343987 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.879956007 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.879985094 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.880398035 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.880409002 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.893085957 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.893429041 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.893449068 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.894012928 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.894020081 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.914834023 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.915623903 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.915637970 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.916167021 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.916177034 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.939234018 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.939275980 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.939342022 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.939595938 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.939611912 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.939647913 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.939655066 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.943629980 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.943737030 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.943861008 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.944058895 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.944092989 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.955558062 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.955971956 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.956015110 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.956481934 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.956490993 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.981967926 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.982031107 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.982109070 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.982331991 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.982363939 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.982398987 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.982413054 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.986417055 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.986445904 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.986532927 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.986704111 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.986730099 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.995912075 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.996046066 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.996112108 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.996179104 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.996192932 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.996206999 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.996213913 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.999435902 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.999480009 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:24.999550104 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.999706984 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:24.999723911 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.017945051 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.018075943 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.018151045 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.018269062 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.018280983 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.018307924 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.018318892 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.021281004 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.021306992 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.021389008 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.021600008 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.021612883 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.059736013 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.059799910 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.059854984 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.060075998 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.060095072 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.060111046 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.060117960 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.063101053 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.063146114 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.063235998 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.063431025 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.063446045 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.599910021 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.605079889 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.605143070 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.605513096 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.605525970 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.633450985 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.634253979 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.634270906 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.634922981 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.634975910 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.684839010 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.684916019 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.685364962 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.685379982 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.685410023 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.685452938 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.685887098 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.685894012 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.685909986 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.685913086 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.698980093 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.699438095 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.699462891 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.699846983 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.699857950 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.700933933 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.701057911 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.701132059 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.701241970 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.701292992 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.701323032 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.701339006 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.703980923 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.704035044 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.704125881 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.704265118 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.704291105 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.734576941 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.734647989 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.734838963 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.734921932 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.734922886 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.734965086 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.734994888 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.737250090 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.737282991 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.737365007 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.737473965 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.737488031 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.784216881 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.784370899 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.784476995 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.794526100 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.794625998 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.794821024 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.798860073 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.798927069 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.798990965 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.816006899 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.816028118 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.816041946 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.816046953 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.817468882 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.817473888 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.817473888 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.817506075 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.817507029 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.817527056 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.817538023 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.817550898 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.820015907 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.820099115 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.820183039 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.820260048 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.820261002 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.820286036 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.820306063 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.820329905 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.820332050 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.820348978 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.820380926 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.820440054 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.820466995 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:25.820491076 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:25.820513964 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.415693045 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.416474104 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.416531086 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.416950941 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.416964054 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.423818111 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.424129009 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.424151897 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.424439907 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.424447060 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.505101919 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.508332968 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.512538910 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.512568951 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.513052940 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.513058901 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.514869928 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.514952898 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.515005112 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.519016027 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.519061089 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.519088030 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.519104004 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.529042006 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.529232979 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.529318094 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.534473896 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.534493923 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.534522057 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.534529924 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.552366018 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.568931103 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.568948984 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.569346905 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.569356918 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.573419094 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.573472977 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.573539019 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.574523926 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.574568987 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.574635983 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.574780941 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.574800014 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.575052023 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.575078011 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.608484983 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.608623981 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.608700037 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.611610889 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.611635923 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.619031906 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.619086027 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.619201899 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.620357037 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.620373964 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.666513920 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.666611910 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.666742086 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.666944981 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.666970015 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.666995049 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.667007923 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.669631958 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.669653893 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:26.669766903 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.669905901 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:26.669914961 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.234916925 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.239033937 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.247235060 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.247277021 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.247704983 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.247716904 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.247915030 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.247956991 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.248271942 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.248281002 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.276463985 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.304819107 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.304883003 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.305294037 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.305366993 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.305373907 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.306705952 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.306713104 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.307180882 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.307185888 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.344825983 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.344993114 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.346770048 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.352386951 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.352533102 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.352565050 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.352591991 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.352615118 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.352646112 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.352662086 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.360985041 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.361017942 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.361037970 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.361046076 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.400949955 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.401107073 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.404661894 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.404740095 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.404768944 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.404834032 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.497766972 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.497767925 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.497821093 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.497848034 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.498051882 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.498070002 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.498092890 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.498106956 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.630234003 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.630275965 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.630353928 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.632611036 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.632632017 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.632780075 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.632812023 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.632875919 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.633023977 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.633040905 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.634042978 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.634084940 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.634147882 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.634294987 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.634305000 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.634797096 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.634804010 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:27.634855986 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.657542944 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:27.657568932 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.281028032 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.282046080 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.282074928 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.284034014 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.284039974 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.284507990 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.284869909 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.284899950 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.285291910 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.285301924 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.286689043 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.287059069 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.287134886 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.287429094 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.287441969 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.309482098 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.310131073 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.310187101 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.310692072 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.310698986 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.385341883 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.386001110 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.386022091 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.386426926 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.386435032 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.386914968 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.386993885 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.387053013 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.387162924 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.387178898 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.387190104 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.387195110 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.387326002 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.387407064 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.387465954 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.387964964 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.388005018 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.388034105 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.388048887 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.388755083 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.388973951 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.389035940 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.389179945 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.389179945 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.389219046 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.389241934 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.393587112 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.393651962 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.393722057 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.393898010 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.393927097 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.395587921 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.395678997 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.395764112 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.395874023 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.395910025 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.396281958 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.396310091 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.396393061 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.396536112 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.396557093 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.409703970 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.409840107 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.409890890 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.409921885 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.409930944 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.409941912 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.409945011 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.411755085 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.411792994 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.411850929 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.412002087 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.412024021 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.488406897 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.488477945 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.488599062 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.488708019 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.488737106 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.488751888 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.488759041 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.491612911 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.491643906 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.491863966 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.491863966 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.491890907 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.975245953 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.975764990 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.975794077 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:28.976177931 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:28.976185083 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.034846067 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.035661936 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.035701036 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.036066055 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.036077023 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.060889959 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.061444998 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.061487913 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.062033892 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.062045097 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.065073013 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.065443039 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.065506935 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.065794945 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.065809011 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.074398041 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.074482918 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.074536085 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.074743986 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.074775934 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.074789047 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.074794054 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.078522921 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.078581095 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.078668118 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.078881979 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.078907967 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.135540009 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.135694027 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.135781050 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.135828972 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.135829926 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.135859966 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.135888100 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.139131069 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.139182091 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.139250040 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.139353991 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.139369011 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.154282093 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.154684067 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.154707909 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.155261993 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.155267954 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.170722008 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.170856953 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.170950890 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.171070099 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.171118021 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.171158075 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.171173096 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.173526049 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.173612118 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.173693895 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.173785925 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.173810005 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.217989922 CEST	49810	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.218070984 CEST	443	49810	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.218141079 CEST	49810	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.218796968 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.218839884 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.218900919 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.219054937 CEST	49810	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.219096899 CEST	443	49810	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.219201088 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.219216108 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.252243996 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.252271891 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.252345085 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.252367020 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.252401114 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.252624035 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.252645016 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.252691984 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.252706051 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.255213976 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.255274057 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.255352020 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.255484104 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.255501986 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.257400036 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.257455111 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.257538080 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.257627010 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.257627010 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.257646084 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.257656097 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.260024071 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.260082006 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.260190964 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.260323048 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.260344982 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.753734112 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.757121086 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.757162094 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.758147001 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.758157969 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.806931019 CEST	443	49810	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.807338953 CEST	49810	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.807370901 CEST	443	49810	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.808402061 CEST	443	49810	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.808491945 CEST	49810	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.811070919 CEST	49810	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.811141014 CEST	443	49810	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.811549902 CEST	49810	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.811562061 CEST	443	49810	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.821455002 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.821751118 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.821780920 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.822782993 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.822854042 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.823329926 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.823417902 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.828113079 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.830049038 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.830079079 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.830801964 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.830806017 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.857044935 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.857069016 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.857132912 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.857158899 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.857295036 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.857352018 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.859868050 CEST	49810	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.860393047 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.860425949 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.860451937 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.860470057 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.873790979 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.873837948 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.873910904 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.874080896 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.874099016 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.875005007 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.875022888 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.880882025 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.881356955 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.881388903 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.881800890 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.881808996 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.915529966 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.922801971 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.928857088 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.928878069 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.928944111 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.928957939 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.929177999 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.929228067 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.929317951 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.929337025 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.929737091 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.929742098 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.929991961 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.930010080 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.930020094 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.930025101 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.932917118 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.932952881 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.933015108 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.933346987 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.933360100 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.943238974 CEST	443	49810	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.943300962 CEST	443	49810	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.943362951 CEST	49810	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.945100069 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.948688984 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.948766947 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.954387903 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.954402924 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.958753109 CEST	49810	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.958774090 CEST	443	49810	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:29.964695930 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:29.978888035 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.978946924 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.979007959 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.979043007 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.979089975 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.979099989 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.979135036 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.989682913 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.989682913 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.989720106 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.989731073 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.995502949 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.995536089 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:29.995592117 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.996495962 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:29.996510983 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.011400938 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.034048080 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.034113884 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.034171104 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.038391113 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.038414001 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.038428068 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.038435936 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.042371988 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.042427063 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.042506933 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.042644024 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.042671919 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.054960012 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.055330992 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.055389881 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.055478096 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.055499077 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.055510044 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.055516005 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.059243917 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.059286118 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.059339046 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.059820890 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.059833050 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.133415937 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.133438110 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.133511066 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.133533001 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.133579016 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.133827925 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.133836031 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.133882046 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.134623051 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.134629965 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.134686947 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.134694099 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.134722948 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.134767056 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.159486055 CEST	49811	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.159503937 CEST	443	49811	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.160664082 CEST	49820	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.160716057 CEST	443	49820	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.160779953 CEST	49820	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.160984039 CEST	49820	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.160999060 CEST	443	49820	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.161495924 CEST	49821	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.161537886 CEST	443	49821	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.161607981 CEST	49821	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.161788940 CEST	49821	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.161804914 CEST	443	49821	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.162239075 CEST	49822	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.162257910 CEST	443	49822	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.162322044 CEST	49822	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.162538052 CEST	49822	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.162550926 CEST	443	49822	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.162909031 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.162918091 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.162969112 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.163125038 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.163135052 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.163623095 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.163630009 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.163683891 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.163887024 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.163899899 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.164319038 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.164339066 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.164401054 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.164557934 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.164580107 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.642525911 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.643134117 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.643170118 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.643728018 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.643739939 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.734128952 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.734591007 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.734613895 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.735174894 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.735179901 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.737257957 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.737684011 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.737766981 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.738183022 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.738198042 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.753927946 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.753979921 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.754035950 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.754198074 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.754230976 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.754260063 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.754273891 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.755232096 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.755628109 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.755635977 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.756622076 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.756684065 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.757527113 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.757606030 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.757680893 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.757936954 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.757992983 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.757997990 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.758109093 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.758357048 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.758380890 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.758858919 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.758866072 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.759047031 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.759057999 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.759166002 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.759195089 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.759433031 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.759443998 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.759779930 CEST	443	49821	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.759941101 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.759943962 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.760138035 CEST	49821	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.760153055 CEST	443	49821	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.760482073 CEST	443	49822	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.760689020 CEST	49822	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.760703087 CEST	443	49822	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.761306047 CEST	443	49821	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.761676073 CEST	49821	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.761854887 CEST	443	49821	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.761907101 CEST	49821	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.764292955 CEST	443	49822	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.764368057 CEST	49822	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.768115044 CEST	49822	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.768214941 CEST	443	49822	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.768291950 CEST	49822	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.768307924 CEST	443	49822	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.768726110 CEST	443	49820	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.769085884 CEST	49820	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.769094944 CEST	443	49820	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.769608021 CEST	443	49820	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.769973993 CEST	49820	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.770020008 CEST	443	49820	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.770196915 CEST	49820	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.779803038 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.780173063 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.780181885 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.781624079 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.781676054 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.781965017 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.782046080 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.782175064 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.782181978 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.782619953 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.782834053 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.782846928 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.783766985 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.783824921 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.784379959 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.784440994 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.784507036 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.784514904 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.799258947 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.803406000 CEST	443	49821	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.811402082 CEST	443	49820	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.814995050 CEST	49822	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.814995050 CEST	49821	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.831141949 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.831142902 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.833019018 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.833492041 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.833551884 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.833611012 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.833637953 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.833652020 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.833659887 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.835257053 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.835361958 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.835412979 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.835504055 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.835520029 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.835535049 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.835541010 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.836965084 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.837016106 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.837100983 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.837291002 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.837312937 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.837424994 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.837449074 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.837505102 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.837645054 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.837656021 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.862369061 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.862520933 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.862586021 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.862695932 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.862711906 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.862724066 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.862731934 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.862746000 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.862927914 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.862968922 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.864135981 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.864147902 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.864161968 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.864166975 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.866235971 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.866265059 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.866349936 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.866374016 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.866384983 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.866436958 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.866535902 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.866545916 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.866564035 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:30.866573095 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:30.888367891 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.888391018 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.888470888 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.888488054 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.888533115 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.889107943 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.889169931 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.889170885 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.889179945 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.889224052 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.889230013 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.889244080 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.889282942 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.890021086 CEST	49824	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.890031099 CEST	443	49824	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.890043020 CEST	443	49820	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.890106916 CEST	443	49820	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.890147924 CEST	49820	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.893688917 CEST	49831	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.893718958 CEST	443	49831	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.893791914 CEST	49831	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.894311905 CEST	49831	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.894325018 CEST	443	49831	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.894908905 CEST	49820	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.894913912 CEST	443	49820	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.897676945 CEST	443	49821	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.897759914 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.897830963 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.897896051 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.897905111 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.897948980 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.897953987 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.898025990 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.898076057 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.898083925 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.898128033 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.898473978 CEST	443	49821	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.898515940 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.898528099 CEST	49821	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.898575068 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.899425983 CEST	49821	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.899437904 CEST	443	49821	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.904541016 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.904622078 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.904659033 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.926295996 CEST	443	49822	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.926373959 CEST	443	49822	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.926477909 CEST	49822	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.936250925 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.936275959 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.936389923 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.936405897 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.936455011 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.936825991 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.936887026 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.937247038 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.937309980 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.940907955 CEST	49822	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.940920115 CEST	443	49822	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.943243980 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.943326950 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.943336010 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.943378925 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.954860926 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.988507986 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.988529921 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.988647938 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.988665104 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.988693953 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.988723993 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.988740921 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.988751888 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.988854885 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:30.988902092 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.989620924 CEST	49823	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:30.989633083 CEST	443	49823	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.027412891 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.027493000 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.027518988 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.027585030 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.028219938 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.028285027 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.028294086 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.028369904 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.028418064 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.029397964 CEST	49825	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.029408932 CEST	443	49825	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.504281044 CEST	443	49831	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.504596949 CEST	49831	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.504647017 CEST	443	49831	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.505773067 CEST	443	49831	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.506160975 CEST	49831	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.506330013 CEST	49831	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.506339073 CEST	443	49831	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.530668020 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.531199932 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.531234980 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.531789064 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.531795979 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.531919956 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.532246113 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.532290936 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.532504082 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.532732964 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.532744884 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.532989979 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.533010006 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.533447981 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.533453941 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.541349888 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.541637897 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.541666031 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.542104006 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.542109013 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.547408104 CEST	443	49831	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.560282946 CEST	49831	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.580430031 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.580894947 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.580918074 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.581293106 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.581299067 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.621098042 CEST	443	49831	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.621130943 CEST	443	49831	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.621182919 CEST	49831	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.621192932 CEST	443	49831	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.621244907 CEST	49831	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.622545958 CEST	49831	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.622589111 CEST	443	49831	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.629493952 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.629745960 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.629801989 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.631339073 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.631405115 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.631421089 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.631472111 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.631969929 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.632023096 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.632024050 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.632070065 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.636439085 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.636457920 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.636470079 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.636476994 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.637342930 CEST	49836	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.637388945 CEST	443	49836	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.637451887 CEST	49836	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.637660980 CEST	49836	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:31.637675047 CEST	443	49836	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:31.639055014 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.639075994 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.639120102 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.639132977 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.640223026 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.640223026 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.640254974 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.640273094 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.642287016 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.642343998 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.642419100 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.643244028 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.643254042 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.643306971 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.643487930 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.643516064 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.643559933 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.643670082 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.643687010 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.643785000 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.643796921 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.643876076 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.643887997 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.646725893 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.646931887 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.646979094 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.647221088 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.647238970 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.647250891 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.647255898 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.649914980 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.649935007 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.649995089 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.650135040 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.650146961 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.685420990 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.685566902 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.685630083 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.687180042 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.687186003 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.687221050 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.687226057 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.691005945 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.691025972 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:31.691078901 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.691277981 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:31.691291094 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.238200903 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.270777941 CEST	443	49836	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.292388916 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.297584057 CEST	49836	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.297610044 CEST	443	49836	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.298855066 CEST	443	49836	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.300097942 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.300162077 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.300231934 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.300331116 CEST	49843	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.300425053 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.301060915 CEST	49843	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.302957058 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.303014040 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.303102970 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.304857016 CEST	49836	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.305052996 CEST	443	49836	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.305433989 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.305474997 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.305877924 CEST	49843	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.305908918 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.306339979 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.306364059 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.309642076 CEST	49836	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.311736107 CEST	49845	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:42:32.311749935 CEST	443	49845	142.250.184.196	192.168.2.5
Oct 3, 2024 23:42:32.311829090 CEST	49845	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:42:32.315179110 CEST	49845	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:42:32.315190077 CEST	443	49845	142.250.184.196	192.168.2.5
Oct 3, 2024 23:42:32.318938017 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.318964958 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.319396973 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.319407940 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.323990107 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.324532986 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.324563980 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.324929953 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.324934959 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.325582981 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.325932980 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.325965881 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.326260090 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.326267004 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.332109928 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.332971096 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.333010912 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.333512068 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.333523989 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.343559027 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.344208002 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.344225883 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.344651937 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.344655991 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.355402946 CEST	443	49836	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.415221930 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.415380955 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.415462017 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.415503979 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.415556908 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.417906046 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.417943954 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.418004990 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.418021917 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.422501087 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.422629118 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.422698021 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.423877954 CEST	443	49836	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.424052954 CEST	443	49836	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.424125910 CEST	49836	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.428714037 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.428778887 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.428858042 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.433295965 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.433352947 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.433454990 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.433604956 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.433620930 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.433631897 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.433638096 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.433834076 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.433851957 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.433875084 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.433886051 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.434776068 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.434923887 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.435003996 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.435581923 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.435622931 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.436099052 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.436124086 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.436173916 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.436188936 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.438752890 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.438795090 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.438905954 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.439099073 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.439121008 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.441996098 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.442038059 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.442135096 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.442348957 CEST	49836	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.442369938 CEST	443	49836	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.443530083 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.443563938 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.443641901 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.443708897 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.443763971 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.443772078 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.443818092 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.443864107 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.443876982 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.443887949 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.443893909 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.443902016 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.443907022 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.446012974 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.446034908 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.446099043 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.446650982 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.446659088 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.446713924 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.446881056 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.446891069 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.447145939 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:32.447156906 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:32.889149904 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.889447927 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.889497995 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.893098116 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.893189907 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.893476009 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.893649101 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.893656969 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.899486065 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.899693012 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.899709940 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.901190996 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.901248932 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.901525021 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.901603937 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.901612043 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.902998924 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.903172970 CEST	49843	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.903201103 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.906944036 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.907008886 CEST	49843	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.907272100 CEST	49843	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.907346964 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.907351971 CEST	49843	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.935436964 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.935475111 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.935494900 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.943417072 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.947438002 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.947747946 CEST	443	49845	142.250.184.196	192.168.2.5
Oct 3, 2024 23:42:32.948087931 CEST	49845	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:42:32.948117018 CEST	443	49845	142.250.184.196	192.168.2.5
Oct 3, 2024 23:42:32.948997021 CEST	443	49845	142.250.184.196	192.168.2.5
Oct 3, 2024 23:42:32.949095964 CEST	49845	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:42:32.950347900 CEST	49845	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:42:32.950428009 CEST	443	49845	142.250.184.196	192.168.2.5
Oct 3, 2024 23:42:32.951033115 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.951039076 CEST	49843	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.951054096 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.951055050 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:32.982388973 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.997963905 CEST	49843	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.997971058 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:32.998092890 CEST	49845	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:42:32.998107910 CEST	443	49845	142.250.184.196	192.168.2.5
Oct 3, 2024 23:42:33.007783890 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.007828951 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.007930040 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.007958889 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.008033991 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.008387089 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.008424997 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.008455992 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.008543015 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.008603096 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.008615971 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.008666992 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.015547037 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.015639067 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.015651941 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.015714884 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.020605087 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.020664930 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.020740986 CEST	49843	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.020749092 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.021050930 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.021110058 CEST	49843	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.021307945 CEST	49843	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.021323919 CEST	443	49843	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.022133112 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.022155046 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.022236109 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.022254944 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.022300959 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.022762060 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.022770882 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.022833109 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.023044109 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.023051977 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.023098946 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.029859066 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.029869080 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.029933929 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.029948950 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.030009985 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.044764042 CEST	49845	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:42:33.071851015 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.072489977 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.072526932 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.072981119 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.072990894 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.088093042 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.088577986 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.088622093 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.089011908 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.089025974 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.094429016 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.094506979 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.094542980 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.094604969 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.094615936 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.094686985 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.094744921 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.094878912 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.094913006 CEST	443	49842	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.094935894 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.094974041 CEST	49842	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.101850033 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.102392912 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.102422953 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.102984905 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.102989912 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.108534098 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.108895063 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.108911037 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.109350920 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.109354973 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.110678911 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.110748053 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.111221075 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.111278057 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.111308098 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.111326933 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.111355066 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.111377954 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.111434937 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.111658096 CEST	49844	443	192.168.2.5	52.142.17.242
Oct 3, 2024 23:42:33.111684084 CEST	443	49844	52.142.17.242	192.168.2.5
Oct 3, 2024 23:42:33.114201069 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.114551067 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.114593983 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.114881039 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.114888906 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.173675060 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.173729897 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.173788071 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.173995018 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.174010992 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.178566933 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.178597927 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.178785086 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.179009914 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.179035902 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.188699961 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.188841105 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.188942909 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.189181089 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.189207077 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.192863941 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.192889929 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.192970991 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.193089008 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.193101883 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.200562954 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.200654984 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.200700998 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.200723886 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.200740099 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.200795889 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.200810909 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.200824022 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.200824022 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.200829029 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.200834036 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.203825951 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.203917027 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.204018116 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.204226017 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.204265118 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.206768990 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.207024097 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.207089901 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.207206964 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.207217932 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.207231045 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.207237005 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.209709883 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.209750891 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.209831953 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.210072994 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.210093975 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.216824055 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.216967106 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.217055082 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.217114925 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.217134953 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.217149019 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.217155933 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.219399929 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.219429970 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.219492912 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.219707012 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.219717979 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.837276936 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.837917089 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.838053942 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.838071108 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.838582039 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.838594913 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.838850975 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.838860989 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.839358091 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.839369059 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.858452082 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.859673023 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.859704018 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.860235929 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.860241890 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.869188070 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.869774103 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.869805098 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.871102095 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.871118069 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.938309908 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.938726902 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.938806057 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.938875914 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.938910961 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.938941956 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.938956022 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.939224005 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.939491034 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.939532995 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.939558029 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.939604044 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.939794064 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.939805984 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.939853907 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.939865112 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.943659067 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.943696022 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.943738937 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.943778038 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.943804026 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.943943977 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.943958998 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.943985939 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.944194078 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.944224119 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.956906080 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.956973076 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.957063913 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.957180023 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.957325935 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.957335949 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.957350969 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.957356930 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.961159945 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.961193085 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.961278915 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.961546898 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.961563110 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.971160889 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.971352100 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.971484900 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.975274086 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.975300074 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.975326061 CEST	49855	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.975338936 CEST	443	49855	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.988337040 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.988396883 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:33.988492012 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.988934994 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:33.988964081 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.798616886 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.799305916 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.799367905 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.799410105 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.799700975 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.799721956 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.799854040 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.799860954 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.800409079 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.800412893 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.810331106 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.810781002 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.810791016 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.811132908 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.811137915 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.899322033 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.899517059 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.899699926 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.899699926 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.899732113 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.899787903 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.899826050 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.899828911 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.899888039 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.899892092 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.899930000 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.900039911 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.900059938 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.900070906 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.900077105 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.903644085 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.903647900 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.903664112 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.903695107 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.903728008 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.903759003 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.903893948 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.903894901 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.903903961 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.903909922 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.924330950 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.924429893 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.924514055 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.924549103 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.924562931 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.924575090 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.924581051 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.926312923 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.926337957 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:34.926402092 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.926506996 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:34.926517963 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.358938932 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.359441042 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.359472990 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.359957933 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.359963894 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.457720041 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.457813025 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.458039999 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.458085060 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.458085060 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.458107948 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.458122015 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.460829020 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.460858107 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.460932016 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.461083889 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.461095095 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.541367054 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.543430090 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.543450117 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.543845892 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.543850899 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.566589117 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.566946030 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.566975117 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.567285061 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.567297935 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.567634106 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.567857027 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.567882061 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.568128109 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.568131924 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.640614033 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.640805006 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.640918016 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.640995979 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.640995979 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.641038895 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.641084909 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.643902063 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.643934965 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.644016981 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.644164085 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.644177914 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.664963961 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.665138960 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.665250063 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.665312052 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.665312052 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.665340900 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.665363073 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.667753935 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.667802095 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.667890072 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.668020010 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.668045998 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.670717955 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.670907974 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.671076059 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.671076059 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.671076059 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.672873020 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.672913074 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.672983885 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.673099041 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.673111916 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:35.981735945 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:35.981805086 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.135253906 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.135765076 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.135776997 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.136301994 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.136306047 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.167731047 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.168168068 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.168226957 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.168556929 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.168570042 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.372695923 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.373158932 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.373205900 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.373218060 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.373265028 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.373332024 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.373344898 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.373385906 CEST	49865	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.373392105 CEST	443	49865	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.377269030 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.377825022 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.377836943 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.378305912 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.378309965 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.378695965 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.378758907 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.378846884 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.378987074 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.379019976 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.385057926 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.385461092 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.385555029 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.385576963 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.386112928 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.386116982 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.386446953 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.386466026 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.386940956 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.386946917 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.491523981 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.491714001 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.491811037 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.491911888 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.491911888 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.491956949 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.491982937 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.495192051 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.495213032 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.495302916 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.495476961 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.495490074 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.506829977 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.506906986 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.506959915 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.507077932 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.507093906 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.507107019 CEST	49866	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.507112026 CEST	443	49866	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.509624958 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.509687901 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.509761095 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.509903908 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.509934902 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.526212931 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.526356936 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.526437044 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.526495934 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.526495934 CEST	49867	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.526521921 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.526544094 CEST	443	49867	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.528429031 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.528573990 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.528652906 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.528707027 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.528707027 CEST	49868	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.528733015 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.528753996 CEST	443	49868	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.531989098 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.532020092 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.532078981 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.532253981 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.532267094 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.534446955 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.534492970 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:36.534563065 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.534786940 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:36.534806013 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.280589104 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.281191111 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.281251907 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.281683922 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.281698942 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.284375906 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.284744978 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.284775972 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.285212040 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.285217047 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.291568995 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.291915894 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.291965008 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.292360067 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.292372942 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.296125889 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.296490908 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.296551943 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.296894073 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.296937943 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.379472971 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.379921913 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.379966974 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.379988909 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.380037069 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.380099058 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.380135059 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.380181074 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.380197048 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.382613897 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.382704020 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.382787943 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.382914066 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.382951975 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.383789062 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.383929968 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.384022951 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.384022951 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.384113073 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.384155035 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.386051893 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.386104107 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.386178017 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.386316061 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.386348963 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.394483089 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.394681931 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.394746065 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.394784927 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.394802094 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.394824028 CEST	49870	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.394834042 CEST	443	49870	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.396578074 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.396625996 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.396691084 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.396806955 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.396820068 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.401148081 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.401216984 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.401293039 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.401315928 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.401376963 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.401429892 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.401429892 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.401467085 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.401493073 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.403214931 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.403301001 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:37.403430939 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.403538942 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:37.403578043 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.143579006 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.144031048 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.144093990 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.144512892 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.144527912 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.145597935 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.145958900 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.146037102 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.146466970 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.146480083 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.159714937 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.160096884 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.160119057 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.160471916 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.160478115 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.242777109 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.242814064 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.242862940 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.242914915 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.242974043 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.243165970 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.243165970 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.243210077 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.243237972 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.245928049 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.245975018 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.246067047 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.246220112 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.246252060 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.259435892 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.259552002 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.259618044 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.259680033 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.259680033 CEST	49874	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.259716988 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.259737968 CEST	443	49874	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.261462927 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.261502028 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.261579990 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.261696100 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.261708975 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.263825893 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.263900042 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.263957977 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.263983965 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.264003038 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.264051914 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.264074087 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.264086008 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.264096022 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.264100075 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.265678883 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.265764952 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.265851974 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.265964031 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.265999079 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.878662109 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.879585028 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.879647970 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.879996061 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.880049944 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.896384954 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.897178888 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.897202969 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.897419930 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.897427082 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.947943926 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.948726892 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.948785067 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.948892117 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.948908091 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.979568958 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.980004072 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.980376959 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.980377913 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.980377913 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.982578039 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.982676029 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.982765913 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.982858896 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.982883930 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.995938063 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.996047974 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.996202946 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.996253967 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.996273041 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.996284008 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.996289968 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.998301983 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.998327017 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:38.998414040 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.998543024 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:38.998568058 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.052402020 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.052560091 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.052659035 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.052753925 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.052794933 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.052843094 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.052859068 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.054738045 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.054784060 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.054868937 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.054995060 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.055020094 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.200406075 CEST	49878	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.200480938 CEST	443	49878	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.632714987 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.633518934 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.633580923 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.633840084 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.633852959 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.654469967 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.655005932 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.655033112 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.655275106 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.655286074 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.706877947 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.707568884 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.707638025 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.707773924 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.707788944 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.733628035 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.733705044 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.733812094 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.733822107 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.733875036 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.734015942 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.734052896 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.734081030 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.734095097 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.736572981 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.736618042 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.736709118 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.736841917 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.736860037 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.753798962 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.753895044 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.754051924 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.754316092 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.754317045 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.754333019 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.754352093 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.756386995 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.756475925 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.756568909 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.756684065 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.756719112 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.808576107 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.808641911 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.808739901 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.808747053 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.808804035 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.808887005 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.808887005 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.808945894 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.808971882 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.810904026 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.810946941 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:39.811028004 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.811127901 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:39.811147928 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.415477037 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.416516066 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.416558027 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.416982889 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.416990042 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.423815966 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.424196959 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.424257040 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.424567938 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.424582005 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.507095098 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.507699013 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.507740021 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.508337975 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.508344889 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.516961098 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.517143965 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.517220974 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.517378092 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.517401934 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.517415047 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.517422915 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.525034904 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.525057077 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.525132895 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.525264025 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.525275946 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.525651932 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.525911093 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.525965929 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.525990009 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.526005983 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.526021004 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.526027918 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.528506041 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.528533936 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.528614998 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.528714895 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.528728008 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.610565901 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.610626936 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.610717058 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.611004114 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.611015081 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.611031055 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.611037016 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.614372015 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.614391088 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:40.614479065 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.614712954 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:40.614722967 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.166265011 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.166927099 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.166958094 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.167444944 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.167471886 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.168131113 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.168581963 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.168659925 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.169445038 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.169457912 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.182585001 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.183170080 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.183183908 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.183857918 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.183862925 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.254091978 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.254790068 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.254869938 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.255186081 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.255199909 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.264246941 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.264342070 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.264457941 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.264558077 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.264564037 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.264652014 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.264652014 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.264695883 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.264727116 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.267427921 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.267462969 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.267647028 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.267695904 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.267703056 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.268085957 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.268287897 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.268368006 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.268368006 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.268424988 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.268455029 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.270230055 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.270313025 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.270410061 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.270518064 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.270555019 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.296425104 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.296492100 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.296598911 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.296706915 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.296706915 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.296706915 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.296706915 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.298599958 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.298669100 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.298765898 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.298893929 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.298916101 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.353063107 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.353427887 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.353494883 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.353514910 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.353543997 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.353621006 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.353651047 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.353668928 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.353691101 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.353704929 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.355648041 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.355729103 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.355818987 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.355948925 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.355986118 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.606610060 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.606637955 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.883709908 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.884316921 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.884341955 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.884799004 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.884804010 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.906806946 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.912420988 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.912434101 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.912862062 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.912866116 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.921407938 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.921736002 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.921794891 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.922066927 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.922080040 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.978910923 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.979295969 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.979330063 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.979649067 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.979664087 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.989940882 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.990200043 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.990268946 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.990294933 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.990294933 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.990309954 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.990317106 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.993139029 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.993172884 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:41.993238926 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.993355036 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:41.993371010 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.007755041 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.007915020 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.007976055 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.007997036 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.008007050 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.008022070 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.008025885 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.010282040 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.010308981 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.010389090 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.010508060 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.010535002 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.021357059 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.021406889 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.021476984 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.021590948 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.021630049 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.021661997 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.021677017 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.023542881 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.023580074 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.023639917 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.023756981 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.023768902 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.028925896 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.029237986 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.029259920 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.029587030 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.029597998 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.082597017 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.082791090 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.083044052 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.083117962 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.083148956 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.083175898 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.083190918 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.085230112 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.085280895 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.085357904 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.085473061 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.085505962 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.130696058 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.130882978 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.130960941 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.131072044 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.131072044 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.131119013 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.131149054 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.133297920 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.133382082 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.133471966 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.133574963 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.133596897 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.650669098 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.651489019 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.651551962 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.651828051 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.651842117 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.662215948 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.665776968 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.665806055 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.666126013 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.666131020 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.737674952 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.738068104 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.738099098 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.738428116 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.738439083 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.755763054 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.755925894 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.756081104 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.756568909 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.756570101 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.756613016 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.756639957 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.759479046 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.759526968 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.759601116 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.759711981 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.759727955 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.761311054 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.761478901 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.761838913 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.761878967 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.761878967 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.761893034 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.761900902 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.763943911 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.764013052 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.764095068 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.764218092 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.764252901 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.772099018 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.772411108 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.772438049 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.772773027 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.772784948 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.838798046 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.838871956 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.838977098 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.839109898 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.839109898 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.839230061 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.839246035 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.839282036 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.839289904 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.841713905 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.841799974 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.841883898 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.842019081 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.842056036 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.849065065 CEST	443	49845	142.250.184.196	192.168.2.5
Oct 3, 2024 23:42:42.849112988 CEST	443	49845	142.250.184.196	192.168.2.5
Oct 3, 2024 23:42:42.849245071 CEST	49845	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:42:42.870562077 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.870735884 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.870912075 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.870912075 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.870912075 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.872632027 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.872663021 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:42.872735023 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.872833014 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:42.872858047 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.184670925 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.184732914 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.507596970 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.508378983 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.508440971 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.509325027 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.509339094 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.619194984 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.619368076 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.619447947 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.619564056 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.619565010 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.619600058 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.619621992 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.623152971 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.623209953 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.623290062 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.623449087 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.623473883 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.692625999 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.694264889 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.697088003 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.703202963 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.703286886 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.703701019 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.703716040 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.703947067 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.703974009 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.704683065 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.704693079 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.704977989 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.705034971 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.705389977 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.705409050 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.799232006 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.799284935 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.799350023 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.799432993 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.799567938 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.799623013 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.799946070 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.799990892 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.800019979 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.800035000 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.802573919 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.802659988 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.802742004 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.803909063 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.803946018 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.803956985 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.804114103 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.804172993 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.804213047 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.804234028 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.804250002 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.804256916 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.807729959 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.807769060 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.807842970 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.807948112 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.807960033 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.808521032 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.808587074 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.808643103 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.808667898 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.808702946 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.808702946 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.808706045 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.808751106 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.808756113 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.808778048 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.810970068 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.810978889 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.811036110 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.811141968 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:43.811152935 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:43.889210939 CEST	49845	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:42:43.889264107 CEST	443	49845	142.250.184.196	192.168.2.5
Oct 3, 2024 23:42:44.428539991 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 3, 2024 23:42:44.428632975 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 3, 2024 23:42:44.429672003 CEST	49911	443	192.168.2.5	23.1.237.91
Oct 3, 2024 23:42:44.429759026 CEST	443	49911	23.1.237.91	192.168.2.5
Oct 3, 2024 23:42:44.429866076 CEST	49911	443	192.168.2.5	23.1.237.91
Oct 3, 2024 23:42:44.431205034 CEST	49911	443	192.168.2.5	23.1.237.91
Oct 3, 2024 23:42:44.431282997 CEST	443	49911	23.1.237.91	192.168.2.5
Oct 3, 2024 23:42:44.731673002 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 3, 2024 23:42:44.931817055 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 3, 2024 23:42:44.931850910 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 3, 2024 23:42:44.931932926 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 3, 2024 23:42:45.120412111 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.120923042 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.120942116 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.121402979 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.121407032 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.124075890 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.124332905 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.124381065 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.124624968 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.124643087 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.132231951 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.132452965 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.132464886 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.132827997 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.132847071 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.135163069 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.135376930 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.135402918 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.135647058 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.135653019 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.218519926 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.218588114 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.218631029 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.218642950 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.218704939 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.218758106 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.218974113 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.218985081 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.218993902 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.218997955 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.221985102 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.222074032 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.222167969 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.222290993 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.222318888 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.222472906 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.222608089 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.222668886 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.222718000 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.222718000 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.222750902 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.222774029 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.224803925 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.224889994 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.224961042 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.225063086 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.225111008 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.243522882 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.243796110 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.243854046 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.243901014 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.243905067 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.243935108 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.243937969 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.245805979 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.245831013 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.245893002 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.246057987 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.246083021 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.480578899 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.480662107 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.480727911 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.480776072 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.480808020 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.480918884 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.481631041 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.481673002 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.481678009 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.481698990 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.488106966 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.488601923 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.488687038 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.488770962 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.489058971 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.489094973 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.489201069 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.489216089 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.489722013 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.489727020 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.546478033 CEST	443	49911	23.1.237.91	192.168.2.5
Oct 3, 2024 23:42:45.546740055 CEST	49911	443	192.168.2.5	23.1.237.91
Oct 3, 2024 23:42:45.591025114 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.591170073 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.591231108 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.591398001 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.591398001 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.591409922 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.591422081 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.593975067 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.593993902 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.594054937 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.594213963 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.594222069 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.895895958 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.896354914 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.896414995 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.896946907 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.896960020 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.902553082 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.903070927 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.903130054 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:45.903882980 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:45.903896093 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.003501892 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.004194975 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.004301071 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.004374981 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.004452944 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.004452944 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.004498005 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.004523039 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.006797075 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.006854057 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.006974936 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.007047892 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.007102966 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.007103920 CEST	49912	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.007137060 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.007158995 CEST	443	49912	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.007498980 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.007538080 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.007597923 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.007755041 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.007769108 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.009279013 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.009285927 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.009337902 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.009438992 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.009448051 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.120343924 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.120861053 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.120893002 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.121349096 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.121360064 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.163501024 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.163886070 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.163940907 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.164284945 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.164298058 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.222565889 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.222604990 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.222656965 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.222670078 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.222707987 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.222922087 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.222922087 CEST	49914	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.222950935 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.222971916 CEST	443	49914	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.225845098 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.225931883 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.226016998 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.226128101 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.226152897 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.265414000 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.265855074 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.265942097 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.265942097 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.266045094 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.266081095 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.267924070 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.267975092 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.268198967 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.268327951 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.268342972 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.269026995 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.269349098 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.269391060 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.269700050 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.269715071 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.504216909 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.504390955 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.504637957 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.504637957 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.504637957 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.507617950 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.507699013 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.507793903 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.507987022 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.508019924 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.703025103 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.711313963 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.711344004 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.711800098 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.711805105 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.712224960 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.712959051 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.712973118 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.713135958 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.713172913 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.807719946 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.807784081 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.807863951 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.807882071 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.807969093 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.808156967 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.808156967 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.808172941 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.808181047 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.809808016 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.809839964 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.811489105 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.811573029 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.811685085 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.811954975 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.812036037 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.818093061 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.832828999 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.832900047 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.832948923 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.832948923 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.832956076 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.832962036 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.835611105 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.835689068 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.835851908 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.835966110 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.835995913 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.932513952 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.933017015 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.933058023 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.933504105 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.933557034 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.963749886 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.964078903 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.964118004 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:46.964430094 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:46.964441061 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.036350965 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.037146091 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.037334919 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.037334919 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.037334919 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.040076971 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.040110111 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.040237904 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.040328979 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.040335894 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.067020893 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.067076921 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.067128897 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.067166090 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.067235947 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.067403078 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.067403078 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.067449093 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.067475080 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.070234060 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.070276022 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.070492983 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.070492983 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.070564032 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.180463076 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.180995941 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.181054115 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.181385994 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.181412935 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.285068035 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.285227060 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.285450935 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.285450935 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.285450935 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.288263083 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.288347006 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.288444042 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.288769960 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.288851976 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.341017962 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.341080904 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.473817110 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.474520922 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.474551916 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.475011110 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.475037098 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.485661983 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.486037016 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.486078024 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.486437082 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.486453056 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.580233097 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.581283092 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.581377983 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.581471920 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.581471920 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.581557989 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.581557989 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.581598997 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.581635952 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.584417105 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.584449053 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.584527969 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.584671021 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.584682941 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.586977005 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.587165117 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.587230921 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.587296963 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.587296963 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.587335110 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.587357998 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.589195967 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.589277983 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.589366913 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.589485884 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.589509010 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.590919018 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.590977907 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.692204952 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.692737103 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.692759037 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.693044901 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.693051100 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.714597940 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.715058088 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.715087891 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.715303898 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.715342045 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.800520897 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.801012993 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.801214933 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.801214933 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.801214933 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.804132938 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.804223061 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.804313898 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.804471970 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.804491043 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.814043045 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.814249992 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.814408064 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.814408064 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.814409018 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.816262960 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.816286087 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:47.816360950 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.816461086 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:47.816488028 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.106650114 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.106676102 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.122263908 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.122294903 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.140405893 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.141809940 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.141851902 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.142268896 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.142297983 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.241447926 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.241606951 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.241774082 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.241816044 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.241816044 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.241836071 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.241852045 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.244904041 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.244985104 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.245080948 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.245233059 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.245261908 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.333466053 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.334063053 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.334095955 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.334522009 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.334527016 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.334845066 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.335216045 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.335273981 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.335448980 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.335464954 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.437000990 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.437098026 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.437334061 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.437370062 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.437383890 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.437396049 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.437401056 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.440336943 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.440377951 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.440464973 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.440593958 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.440608978 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.442414999 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.442482948 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.442585945 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.442737103 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.442738056 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.442738056 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.442738056 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.444717884 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.444806099 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.444897890 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.445018053 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.445045948 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.446063995 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.446428061 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.446468115 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.446841002 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.446855068 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.480065107 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.480442047 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.480499029 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.480775118 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.480788946 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.581706047 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.582016945 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.582093954 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.582114935 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.582145929 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.582205057 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.582252026 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.582252026 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.582283020 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.582305908 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.584501028 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.584585905 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.584678888 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.584821939 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.584844112 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.611330032 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.611936092 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.612025976 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.612067938 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.612068892 CEST	49929	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.612086058 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.612106085 CEST	443	49929	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.614212990 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.614253998 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.614331007 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.614439964 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.614451885 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:48.747314930 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:48.747375965 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.006452084 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.007215023 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.007272959 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.007592916 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.007607937 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.091149092 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.091598034 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.091656923 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.091995955 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.092010021 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.125660896 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.126499891 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.126707077 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.128671885 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.128673077 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.128737926 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.128772974 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.131824017 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.131865978 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.132049084 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.132123947 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.132138968 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.141423941 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.141937017 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.141968012 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.142225981 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.142234087 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.189331055 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.189560890 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.189635992 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.189691067 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.189691067 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.189728022 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.189750910 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.192065001 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.192099094 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.192171097 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.192284107 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.192291021 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.222615004 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.222949982 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.222973108 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.223299026 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.223309994 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.246198893 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.246270895 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.246318102 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.246335030 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.246388912 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.246414900 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.246444941 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.246462107 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.246462107 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.246471882 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.246481895 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.248651028 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.248677015 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.248739958 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.248878956 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.248889923 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.269251108 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.269732952 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.269762039 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.270030022 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.270056009 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.321372032 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.321499109 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.321584940 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.321618080 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.321690083 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.321739912 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.321739912 CEST	49934	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.321780920 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.321806908 CEST	443	49934	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.323606014 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.323689938 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.323776007 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.323884964 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.323909044 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.369560957 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.369740963 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.369828939 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.369868040 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.369868040 CEST	49935	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.369885921 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.369898081 CEST	443	49935	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.371639967 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.371721983 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.371817112 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.371928930 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.371951103 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.786314011 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.787091970 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.787151098 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.787764072 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.787817955 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.853466988 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.854155064 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.854171991 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.854839087 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.854842901 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.886821032 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.886847973 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.887073994 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.887130976 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.887130976 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.887465954 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.887466908 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.887499094 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.887516022 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.891947031 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.892052889 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.892127991 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.892404079 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.892426968 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.901515007 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.901911974 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.901918888 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.902488947 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.902492046 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.961061001 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.961086988 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.961138010 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.961146116 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.961191893 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.961350918 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.961363077 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.961370945 CEST	49937	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.961375952 CEST	443	49937	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.964070082 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.964106083 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.964204073 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.964315891 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.964328051 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.978004932 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.978693008 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.978723049 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:49.979265928 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:49.979307890 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.002466917 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.002542973 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.002595901 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.002603054 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.002690077 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.002737999 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.002754927 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.002758980 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.002772093 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.002774954 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.005089998 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.005171061 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.005420923 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.005420923 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.005567074 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.078319073 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.078480959 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.078572989 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.078663111 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.078706980 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.078739882 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.078756094 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.081322908 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.081410885 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.081506014 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.081624031 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.081648111 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.975488901 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.975950956 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.976213932 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.976273060 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.976500034 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.976588011 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.976717949 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.976769924 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.976917982 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.976932049 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.978318930 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.978595972 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.978652954 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.978899956 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.978913069 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.989543915 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.989592075 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.989926100 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.989940882 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.989984035 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.990066051 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.990212917 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.990233898 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:50.990269899 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:50.990278959 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.075886965 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.076067924 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.076313972 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.076314926 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.076314926 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.077234983 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.077476025 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.077589035 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.077589035 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.077589035 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.079135895 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.079176903 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.079260111 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.079350948 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.079361916 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.079396009 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.079408884 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.079421043 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.079715967 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.079756021 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.094412088 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.094481945 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.094549894 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.094610929 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.094671965 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.094702959 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.094703913 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.094757080 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.094788074 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.094804049 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.095043898 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.095117092 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.095133066 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.095185995 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.095206022 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.095221996 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.095263004 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.095290899 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.095304966 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.095343113 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.095343113 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.095406055 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.095418930 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.095418930 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.095419884 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.095446110 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.095462084 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.097306013 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.097348928 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.097429037 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.097559929 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.097624063 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.097656012 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.097686052 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.097688913 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.097765923 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.097784042 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.097820997 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.097904921 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.097991943 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.098087072 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.098115921 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.310126066 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.310165882 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.387868881 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.387904882 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.387934923 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.387995958 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.718744993 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.719484091 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.719511032 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.719954014 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.719980001 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.734642029 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.735100031 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.735143900 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.735466957 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.735493898 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.743868113 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.744138956 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.744180918 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.744425058 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.744436979 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.749789953 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.750034094 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.750093937 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.750297070 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.750309944 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.770237923 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.770575047 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.770648956 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.770759106 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.770785093 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.836541891 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.836693048 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.836958885 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.836958885 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.836958885 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.837049961 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.837117910 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.837217093 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.837264061 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.837297916 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.837316036 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.837335110 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.837351084 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.837357998 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.840251923 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.840315104 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.840361118 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.840395927 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.840447903 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.840533972 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.840560913 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.840579987 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.840857983 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.840939045 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.843113899 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.843187094 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.843242884 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.843266964 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.843293905 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.843341112 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.843380928 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.843442917 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.843442917 CEST	49948	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.843461990 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.843485117 CEST	443	49948	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.848845005 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.849138021 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.849203110 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.849253893 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.849253893 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.849287033 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.849313021 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.867969990 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.868026972 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.868105888 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.868249893 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.868268013 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.869102955 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.869187117 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.869263887 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.869378090 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.869421959 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.872787952 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.873403072 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.873481989 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.873534918 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.873536110 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.873562098 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.873586893 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.875493050 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.875581026 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:51.875684023 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.875776052 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:51.875797987 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.137962103 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.137994051 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.418881893 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:52.418966055 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:52.419075966 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:52.419482946 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:52.419559002 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:52.671183109 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.671772957 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.671797037 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.672255039 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.672261000 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.673934937 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.674180031 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.674241066 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.674462080 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.674477100 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.674664974 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.674875975 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.674890041 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.675158978 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.675168991 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.678168058 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.678488970 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.678523064 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.678704023 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.678719044 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.681420088 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.681643963 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.681660891 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.681945086 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.681951046 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.771182060 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.771253109 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.771357059 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.771368980 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.771444082 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.771651983 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.771678925 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.771698952 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.771706104 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.774435043 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.774557114 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.774629116 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.774698973 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.774698973 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.774732113 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.774760962 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.775136948 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.775223970 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.775314093 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.775492907 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.775511980 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.776225090 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.776396036 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.776449919 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.776463032 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.776508093 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.776535034 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.776545048 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.776570082 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.776582956 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.776910067 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.776952028 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.777013063 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.777144909 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.777163029 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.778239965 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.778243065 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.778248072 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.778333902 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.778376102 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.778424978 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.778435946 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.778436899 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.778559923 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.778573990 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.778608084 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.778619051 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.780322075 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.780344009 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.780426979 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.780539989 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.780566931 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.786736965 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.786894083 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.786956072 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.786986113 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.786986113 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.786998987 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.787009001 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.788753986 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.788844109 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:52.788918972 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.789017916 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:52.789055109 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.209378004 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.209564924 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:53.213327885 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:53.213382006 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.213924885 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.221759081 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:53.267416000 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.417293072 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.418078899 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.418108940 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.418518066 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.418543100 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.418674946 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.419070005 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.419146061 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.419437885 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.419451952 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.427881002 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.428335905 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.428375006 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.428571939 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.428580046 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.429883957 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.430247068 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.430308104 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.430608988 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.430661917 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.439630032 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.439867973 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.439882994 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.440263033 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.440273046 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.522264957 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.522284985 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.522313118 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.522420883 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.522420883 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.522686958 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.522686958 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.522722006 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.522742033 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.525533915 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.525579929 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.525675058 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.525810957 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.525830030 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.527129889 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.527276993 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.527339935 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.527415991 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.527415991 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.527451038 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.527472973 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.529280901 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.529304028 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.529378891 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.529495001 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.529506922 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.535379887 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.535581112 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.535769939 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.535769939 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.536103964 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.536277056 CEST	49960	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.536339045 CEST	443	49960	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.536611080 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.536772966 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.536772966 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.536772966 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.537590027 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.537677050 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.537759066 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.537868023 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.537890911 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.538535118 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.538623095 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.538717031 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.538791895 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.538814068 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.540613890 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.540676117 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.540719032 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.540927887 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:53.540929079 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:53.540993929 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.541054010 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:53.541754007 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.541831970 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.541857958 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:53.541874886 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.541898966 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:53.541906118 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.542607069 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.542665005 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:53.542783022 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.542859077 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.542890072 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.542906046 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.542927027 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.542941093 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.545367002 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:53.545392990 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.545434952 CEST	49955	443	192.168.2.5	4.175.87.197
Oct 3, 2024 23:42:53.545449972 CEST	443	49955	4.175.87.197	192.168.2.5
Oct 3, 2024 23:42:53.546612978 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.546655893 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.546717882 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.546809912 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.546822071 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:53.840986967 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:53.841017008 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.363895893 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.364522934 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.364566088 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.365036011 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.365046978 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.365309000 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.365432024 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.365703106 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.365783930 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.365911007 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.365994930 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.366272926 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.366297960 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.366328001 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.366350889 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.367871046 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.368180990 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.368205070 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.368484974 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.368490934 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.466837883 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.466932058 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.466996908 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.467025995 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.467053890 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.467113018 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.467252016 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.467269897 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.467283010 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.467289925 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.468982935 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.469238043 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.469466925 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.469468117 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.469468117 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.470541000 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.470588923 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.470690012 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.470810890 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.470837116 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.471506119 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.471720934 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.471810102 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.471915007 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.471981049 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.472101927 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.472105026 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.472138882 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.472174883 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.472176075 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.472265005 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.472265005 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.472306967 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.472338915 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.472423077 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.472635031 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.472728014 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.472728014 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.472728014 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.474482059 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.474499941 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.474523067 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.474539995 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.474585056 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.474771023 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.474790096 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.474837065 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.474838018 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.474896908 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.778549910 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.778572083 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.778589964 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.778667927 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.936969995 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.937691927 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.937772989 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:54.938179970 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:54.938195944 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.043845892 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.044012070 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.044253111 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.044342041 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.044342041 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.044388056 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.044420958 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.047553062 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.047640085 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.047744036 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.047899008 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.047926903 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.120318890 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.121150017 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.121176958 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.121618986 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.121624947 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.122278929 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.122889042 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.122946978 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.123234987 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.123287916 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.123347044 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.123722076 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.123783112 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.123859882 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.123876095 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.131227016 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.131433964 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.131463051 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.131714106 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.131721020 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.221149921 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.221311092 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.221487045 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.221529007 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.221529007 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.221549034 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.221563101 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.222295046 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.222368002 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.222476959 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.222588062 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.222589016 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.222589016 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.222589016 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.224148989 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.224169970 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.224308014 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.224363089 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.224390984 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.224421024 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.224435091 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.224468946 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.224554062 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.224575043 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.226619959 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.227718115 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.227940083 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.228002071 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.228043079 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.228094101 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.228141069 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.228141069 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.228173018 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.228199005 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.229967117 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.230052948 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.230142117 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.230256081 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.230278015 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.234458923 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.234603882 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.234662056 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.234704018 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.234704971 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.234725952 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.234738111 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.236401081 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.236423969 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.236499071 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.236634016 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.236660004 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.528472900 CEST	49969	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.528537989 CEST	443	49969	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.698213100 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.698915005 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.698995113 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.699440956 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.699455023 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.797591925 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.797746897 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.797832966 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.797943115 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.797988892 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.798017979 CEST	49970	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.798032999 CEST	443	49970	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.801146030 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.801269054 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.801374912 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.801537991 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.801580906 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.869072914 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.869638920 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.869668007 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.870076895 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.870104074 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.885140896 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.885519028 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.885689974 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.885747910 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.885844946 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.885904074 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.886071920 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.886125088 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:55.886269093 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:55.886282921 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.132416010 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.132452965 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.132510900 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.132644892 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.132744074 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.132782936 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.132864952 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.133004904 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.133052111 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.133052111 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.133052111 CEST	49971	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.133080959 CEST	49973	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.133084059 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.133096933 CEST	443	49973	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.133101940 CEST	443	49971	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.133390903 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.133506060 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.133755922 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.133831024 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.133965015 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.134010077 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.134040117 CEST	49972	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.134056091 CEST	443	49972	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.134372950 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.134393930 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.134804010 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.134815931 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.136538982 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.136564016 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.136590004 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.136657953 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.136661053 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.136715889 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.136826038 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.136841059 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.136920929 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.136960030 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.137264013 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.137286901 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.137355089 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.137430906 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.137444019 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.243474007 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.243726969 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.243815899 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.243895054 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.243895054 CEST	49974	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.243937969 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.243968010 CEST	443	49974	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.245826006 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.245872021 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.245951891 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.246073961 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.246083975 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.473006010 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.473994970 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.474052906 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.474256992 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.474272013 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.576984882 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.577054024 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.577291012 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.577352047 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.577421904 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.577436924 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.577519894 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.577524900 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.577548981 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.580347061 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.580445051 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.580559969 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.580704927 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.580727100 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.797780991 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.798527002 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.798557043 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.798906088 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.798930883 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.820781946 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.821590900 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.821650982 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.821715117 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.821729898 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.841034889 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.841517925 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.841576099 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.841964006 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.842019081 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.897490025 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.897677898 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.897905111 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.898027897 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.898051977 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.898068905 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.898075104 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.901371002 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.901456118 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.901545048 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.901738882 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.901792049 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.927927971 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.928245068 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.928262949 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.928592920 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.928597927 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.929152012 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.929312944 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.929666042 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.929666042 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.929666042 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.931493998 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.931576014 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.931654930 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.931756020 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.931777000 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.951100111 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.952064037 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.952172041 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.952172041 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.952172041 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.953907967 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.953949928 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:56.954006910 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.954132080 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:56.954142094 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.032248974 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.032412052 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.032502890 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.035106897 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.035140991 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.035161972 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.035171032 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.037966013 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.038007975 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.038083076 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.038197994 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.038207054 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.153434992 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.153496981 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.228389978 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.229187965 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.229233027 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.229557037 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.229573011 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.263017893 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.263047934 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.338229895 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.338381052 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.338457108 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.338568926 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.338592052 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.338607073 CEST	49980	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.338613987 CEST	443	49980	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.341609955 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.341651917 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.341734886 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.341873884 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.341881990 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.589638948 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.590625048 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.590683937 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.591025114 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.591108084 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.598018885 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.598583937 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.598645926 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.598902941 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.598917961 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.610841036 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.611258984 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.611316919 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.611479998 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.611495018 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.691364050 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.691791058 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.691823006 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.692197084 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.692203999 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.696372986 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.696415901 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.696465015 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.696485996 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.696556091 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.696737051 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.696783066 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.696813107 CEST	49983	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.696827888 CEST	443	49983	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.699692965 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.699775934 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.700041056 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.700148106 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.700179100 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.715297937 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.715497017 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.715578079 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.715662956 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.715662956 CEST	49982	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.715706110 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.715734959 CEST	443	49982	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.718394995 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.718429089 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.718507051 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.718642950 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.718652964 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.724912882 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.725169897 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.725328922 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.725328922 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.725328922 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.727269888 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.727319002 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.727418900 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.727541924 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.727560043 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.807956934 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.808121920 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.808299065 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.808299065 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.808341026 CEST	49984	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.808360100 CEST	443	49984	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.810283899 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.810367107 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.810470104 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.810774088 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.810853004 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.950299978 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.950360060 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.991705894 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.992527962 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.992563009 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:57.992736101 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:57.992746115 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.096735954 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.097244024 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.097292900 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.097311020 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.097347975 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.097392082 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.097403049 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.097419024 CEST	49985	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.097424984 CEST	443	49985	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.100476980 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.100575924 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.100677967 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.100817919 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.100836992 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.350579023 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.351157904 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.351214886 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.351669073 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.351680994 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.370906115 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.371303082 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.371340036 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.371717930 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.371730089 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.398613930 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.399089098 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.399111986 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.399432898 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.399440050 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.452212095 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.452378035 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.452462912 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.452586889 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.452634096 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.452663898 CEST	49986	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.452680111 CEST	443	49986	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.455821037 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.455904961 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.456001997 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.456197023 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.456212997 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.467201948 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.467714071 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.467786074 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.468106031 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.468123913 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.474535942 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.474699020 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.474759102 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.474801064 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.474801064 CEST	49988	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.474822998 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.474857092 CEST	443	49988	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.476880074 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.476901054 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.476969957 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.477082968 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.477097988 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.503002882 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.503083944 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.503192902 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.503210068 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.503276110 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.503333092 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.503333092 CEST	49987	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.503375053 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.503401041 CEST	443	49987	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.505409956 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.505494118 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.505575895 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.505733967 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.505764008 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.566101074 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.566267014 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.566454887 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.566456079 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.566456079 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.568114996 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.568197012 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.568279028 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.568392992 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.568413019 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.768491030 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.769088984 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.769146919 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.769620895 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.769686937 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.872327089 CEST	49989	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.872389078 CEST	443	49989	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.874706984 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.874876976 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.874968052 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.875178099 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.875178099 CEST	49990	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.875221014 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.875250101 CEST	443	49990	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.878386974 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.878413916 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:58.878499985 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.878691912 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:58.878700972 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.114837885 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.115456104 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.115494013 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.115931034 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.115936041 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.151221991 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.151885033 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.151905060 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.152200937 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.152218103 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.191426992 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.192198992 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.192257881 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.192568064 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.192583084 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.214303970 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.214371920 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.214433908 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.214467049 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.214488983 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.214533091 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.214651108 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.214669943 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.214683056 CEST	49991	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.214689016 CEST	443	49991	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.217654943 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.217736959 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.217822075 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.217955112 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.217978954 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.230489016 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.230777979 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.230793953 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.231132984 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.231143951 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.252540112 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.252696991 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.252902031 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.252902031 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.252902031 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.254700899 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.254746914 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.254815102 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.254918098 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.254929066 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.296096087 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.296253920 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.296320915 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.296374083 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.296374083 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.296406984 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.296427965 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.298286915 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.298300982 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.298357964 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.298504114 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.298517942 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.329139948 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.329199076 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.329257011 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.329276085 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.329452038 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.329498053 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.329523087 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.329546928 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.329547882 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.329562902 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.329586029 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.331970930 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.332051039 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.332137108 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.332309008 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.332344055 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.519341946 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.520323992 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.520338058 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.520790100 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.520792961 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.559813023 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.559833050 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.798238039 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.798305988 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.798470974 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.798659086 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.798670053 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.798681021 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.798685074 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.802624941 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.802707911 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.802958012 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.803071976 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.803101063 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.988037109 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.988703966 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.988761902 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.989274025 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.989285946 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.999007940 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.999526024 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.999583006 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 3, 2024 23:42:59.999907970 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:42:59.999989986 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.000370026 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.000668049 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.000699997 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.000942945 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.000953913 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.004776001 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.005069017 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.005145073 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.005368948 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.005383015 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.089809895 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.089880943 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.090045929 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.090065002 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.090143919 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.090282917 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.090329885 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.090358019 CEST	49997	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.090372086 CEST	443	49997	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.093882084 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.093971968 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.094089031 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.094270945 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.094301939 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.099757910 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.099814892 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.099874020 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.099896908 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.099975109 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.100034952 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.100096941 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.100112915 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.100133896 CEST	49998	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.100145102 CEST	443	49998	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.102433920 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.102457047 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.102541924 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.102714062 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.102737904 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.103456974 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.103507042 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.103579044 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.103638887 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.103674889 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.103738070 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.103787899 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.103787899 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.103817940 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.103841066 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.106055975 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.106096983 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.106169939 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.106318951 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.106337070 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.108191013 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.108249903 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.108400106 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.108423948 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.108494997 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.108494997 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.108536005 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.108572006 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.110176086 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.110259056 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.110356092 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.110447884 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.110471964 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.442506075 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.443156958 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.443212986 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.443814993 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.443829060 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.543126106 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.543286085 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.543425083 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.543637991 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.543684006 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.543715000 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.543731928 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.547852993 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.547946930 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.548063040 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.548310995 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.548336983 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.737751007 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.738696098 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.738754988 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.739242077 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.739257097 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.754707098 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.755121946 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.755160093 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.755620003 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.755633116 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.758399010 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.758722067 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.758781910 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.759191990 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.759207010 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.761970997 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.762263060 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.762320042 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.762702942 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.762717009 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.839124918 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.839332104 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.839437962 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.839731932 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.839780092 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.839811087 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.839826107 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.843921900 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.844000101 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.844104052 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.844322920 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.844352961 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.856067896 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.856229067 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.856462955 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.856544018 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.856544018 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.856585979 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.856620073 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.859278917 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.859365940 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.859462976 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.859637976 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.859662056 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.860574007 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.860632896 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.860707998 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.860727072 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.860769033 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.860799074 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.860829115 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.860940933 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.860965967 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.860991001 CEST	50004	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.861002922 CEST	443	50004	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.862725019 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.862874985 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.862951040 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.863028049 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.863028049 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.863069057 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.863096952 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.863728046 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.863771915 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.863847971 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.864006996 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.864027977 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.865410089 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.865494013 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:00.865582943 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.865797043 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:00.865837097 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.227451086 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.228174925 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.228239059 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.228830099 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.228842974 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.399360895 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.399399042 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.399535894 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.399599075 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.399669886 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.399733067 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.399947882 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.399985075 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.400010109 CEST	50005	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.400026083 CEST	443	50005	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.404103994 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.404186964 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.404479980 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.404479980 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.404611111 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.410758018 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.411206007 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.411223888 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.411830902 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.411840916 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.513245106 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.513314962 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.513458967 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.513544083 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.513544083 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.513612032 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.513693094 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.585381985 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.586318016 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.586379051 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.586806059 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.586858988 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.595977068 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.596478939 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.596507072 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.597001076 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.597011089 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.597300053 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.597630024 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.597688913 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.598087072 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.598099947 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.598304987 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.598469019 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.598483086 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.598536015 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.598536015 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.598592997 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.598630905 CEST	50006	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.598649025 CEST	443	50006	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.602185011 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.602277040 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.602370977 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.602557898 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.602591991 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.694024086 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.694087029 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.694202900 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.694211006 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.694281101 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.694319010 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.694365025 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.699419022 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.699470997 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.699594975 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.699616909 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.699655056 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.699754000 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.699778080 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.699793100 CEST	50007	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.699800968 CEST	443	50007	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.701344013 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.701417923 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.701529026 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.701587915 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.701674938 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.701718092 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.701740026 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.701769114 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.701829910 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.701977015 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.703257084 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.703341961 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.703430891 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.703608990 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.703638077 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.704261065 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.704303026 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.704380989 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.704511881 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.704524994 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.777425051 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.777559042 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.777617931 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.777663946 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.777708054 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.777738094 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.777797937 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.777832985 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.777857065 CEST	50008	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.777872086 CEST	443	50008	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.780565023 CEST	50014	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.780603886 CEST	443	50014	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:01.780842066 CEST	50014	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.780896902 CEST	50014	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:01.780910969 CEST	443	50014	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.071372986 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.072176933 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.072252989 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.072853088 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.072865963 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.174753904 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.174875021 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.175000906 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.175060987 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.175124884 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.175302029 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.175302029 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.175343990 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.175373077 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.179135084 CEST	50015	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.179224968 CEST	443	50015	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.179347038 CEST	50015	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.179519892 CEST	50015	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.179553986 CEST	443	50015	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.240932941 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.241574049 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.241633892 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.242316008 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.242328882 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.345906019 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.346587896 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.346606016 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.347198009 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.347203016 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.347587109 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.347745895 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.347827911 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.347908974 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.347908974 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.347951889 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.347985029 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.351850986 CEST	50016	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.351953983 CEST	443	50016	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.352058887 CEST	50016	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.352231979 CEST	50016	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.352262020 CEST	443	50016	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.370773077 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.371159077 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.371176958 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.371784925 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.371797085 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.418809891 CEST	443	50014	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.419488907 CEST	50014	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.419498920 CEST	443	50014	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.420054913 CEST	50014	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.420058012 CEST	443	50014	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.444574118 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.444719076 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.444794893 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.444859028 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.444870949 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.444883108 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.444888115 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.447683096 CEST	50017	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.447696924 CEST	443	50017	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.447770119 CEST	50017	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.447932959 CEST	50017	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.447957039 CEST	443	50017	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.472493887 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.472563982 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.472620010 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.472804070 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.472830057 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.472853899 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.472867966 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.475960016 CEST	50018	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.475967884 CEST	443	50018	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.476048946 CEST	50018	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.476218939 CEST	50018	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.476229906 CEST	443	50018	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.517457008 CEST	443	50014	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.517663956 CEST	443	50014	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.517728090 CEST	50014	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.519747019 CEST	50014	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.519747019 CEST	50014	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.519752979 CEST	443	50014	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.519759893 CEST	443	50014	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.545576096 CEST	50019	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.545684099 CEST	443	50019	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.545785904 CEST	50019	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.545945883 CEST	50019	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.545967102 CEST	443	50019	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.822128057 CEST	443	50015	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.822751999 CEST	50015	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.822833061 CEST	443	50015	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.823514938 CEST	50015	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.823529959 CEST	443	50015	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.925004005 CEST	443	50015	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.925314903 CEST	443	50015	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.925507069 CEST	50015	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.925573111 CEST	443	50015	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.925695896 CEST	443	50015	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.925719976 CEST	50015	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.925765991 CEST	443	50015	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.925798893 CEST	50015	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.925798893 CEST	50015	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.925821066 CEST	443	50015	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.925841093 CEST	443	50015	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.994118929 CEST	443	50016	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.994941950 CEST	50016	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.994968891 CEST	443	50016	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:02.995567083 CEST	50016	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:02.995578051 CEST	443	50016	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.094507933 CEST	443	50016	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.094650030 CEST	443	50016	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.094773054 CEST	50016	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.094880104 CEST	50016	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.094924927 CEST	443	50016	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.094953060 CEST	50016	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.094968081 CEST	443	50016	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.129096031 CEST	443	50018	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.129101038 CEST	443	50017	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.129781961 CEST	50018	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.129781961 CEST	50017	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.129822969 CEST	443	50018	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.129839897 CEST	443	50017	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.130321026 CEST	50017	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.130347013 CEST	443	50017	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.130412102 CEST	50018	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.130419016 CEST	443	50018	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.227540970 CEST	443	50019	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.230545998 CEST	443	50018	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.230678082 CEST	443	50018	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.230981112 CEST	50018	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.233212948 CEST	50019	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.233259916 CEST	443	50019	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.233848095 CEST	50019	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.233856916 CEST	443	50019	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.234075069 CEST	50018	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.234101057 CEST	443	50018	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.234117031 CEST	50018	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.234123945 CEST	443	50018	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.234270096 CEST	443	50017	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.234396935 CEST	443	50017	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.234450102 CEST	50017	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.235497952 CEST	50017	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.235503912 CEST	443	50017	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.235516071 CEST	50017	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.235519886 CEST	443	50017	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.336662054 CEST	443	50019	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.336853027 CEST	443	50019	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.336949110 CEST	50019	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.337181091 CEST	50019	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.337229013 CEST	443	50019	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:03.337258101 CEST	50019	443	192.168.2.5	13.107.246.45
Oct 3, 2024 23:43:03.337274075 CEST	443	50019	13.107.246.45	192.168.2.5
Oct 3, 2024 23:43:04.833558083 CEST	443	49911	23.1.237.91	192.168.2.5
Oct 3, 2024 23:43:04.834022045 CEST	49911	443	192.168.2.5	23.1.237.91
Oct 3, 2024 23:43:32.141087055 CEST	50021	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:43:32.141227961 CEST	443	50021	142.250.184.196	192.168.2.5
Oct 3, 2024 23:43:32.141604900 CEST	50021	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:43:32.141750097 CEST	50021	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:43:32.141773939 CEST	443	50021	142.250.184.196	192.168.2.5
Oct 3, 2024 23:43:32.797379017 CEST	443	50021	142.250.184.196	192.168.2.5
Oct 3, 2024 23:43:32.797954082 CEST	50021	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:43:32.798017979 CEST	443	50021	142.250.184.196	192.168.2.5
Oct 3, 2024 23:43:32.798729897 CEST	443	50021	142.250.184.196	192.168.2.5
Oct 3, 2024 23:43:32.799283028 CEST	50021	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:43:32.799567938 CEST	443	50021	142.250.184.196	192.168.2.5
Oct 3, 2024 23:43:32.841186047 CEST	50021	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:43:42.730596066 CEST	443	50021	142.250.184.196	192.168.2.5
Oct 3, 2024 23:43:42.730742931 CEST	443	50021	142.250.184.196	192.168.2.5
Oct 3, 2024 23:43:42.730832100 CEST	50021	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:43:43.891717911 CEST	50021	443	192.168.2.5	142.250.184.196
Oct 3, 2024 23:43:43.891787052 CEST	443	50021	142.250.184.196	192.168.2.5
Oct 3, 2024 23:44:44.286474943 CEST	61425	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:44:44.291318893 CEST	53	61425	1.1.1.1	192.168.2.5
Oct 3, 2024 23:44:44.291536093 CEST	61425	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:44:44.291536093 CEST	61425	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:44:44.296400070 CEST	53	61425	1.1.1.1	192.168.2.5
Oct 3, 2024 23:44:44.746838093 CEST	53	61425	1.1.1.1	192.168.2.5
Oct 3, 2024 23:44:44.748558998 CEST	61425	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:44:44.753792048 CEST	53	61425	1.1.1.1	192.168.2.5
Oct 3, 2024 23:44:44.753900051 CEST	61425	53	192.168.2.5	1.1.1.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 3, 2024 23:42:14.676635027 CEST	63144	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:42:27.626193047 CEST	64367	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:42:27.626420021 CEST	49554	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:42:27.634085894 CEST	53	53017	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:27.635622978 CEST	53	64081	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:28.622756958 CEST	53	60359	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:28.640613079 CEST	51971	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:42:28.640727043 CEST	54757	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:42:29.152024031 CEST	53	51971	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:29.619801998 CEST	53	49554	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:29.621664047 CEST	53	64367	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:29.884980917 CEST	53	54757	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:30.998188019 CEST	60035	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:42:30.998435974 CEST	57164	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:42:31.346743107 CEST	53	55168	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:31.346764088 CEST	53	61577	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:31.508061886 CEST	53	57164	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:32.062556028 CEST	55718	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:42:32.241132975 CEST	53	60035	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:32.298037052 CEST	57108	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:42:32.298233032 CEST	58678	53	192.168.2.5	1.1.1.1
Oct 3, 2024 23:42:32.305428028 CEST	53	58678	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:32.305460930 CEST	53	57108	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:32.490860939 CEST	53	49441	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:33.307200909 CEST	53	55718	1.1.1.1	192.168.2.5
Oct 3, 2024 23:42:45.599463940 CEST	53	50720	1.1.1.1	192.168.2.5
Oct 3, 2024 23:43:04.835179090 CEST	53	49464	1.1.1.1	192.168.2.5
Oct 3, 2024 23:43:27.398272038 CEST	53	50550	1.1.1.1	192.168.2.5
Oct 3, 2024 23:43:27.418643951 CEST	53	54567	1.1.1.1	192.168.2.5
Oct 3, 2024 23:43:55.821329117 CEST	53	63895	1.1.1.1	192.168.2.5
Oct 3, 2024 23:44:40.241838932 CEST	53	56263	1.1.1.1	192.168.2.5
Oct 3, 2024 23:44:44.285454988 CEST	53	65015	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 3, 2024 23:42:29.619901896 CEST	192.168.2.5	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable
Oct 3, 2024 23:42:33.307274103 CEST	192.168.2.5	1.1.1.1	c1ff	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 3, 2024 23:42:14.676635027 CEST	192.168.2.5	1.1.1.1	0x87f8	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:42:27.626193047 CEST	192.168.2.5	1.1.1.1	0x15b9	Standard query (0)	apps.procuraduria.gov.co	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:42:27.626420021 CEST	192.168.2.5	1.1.1.1	0x4558	Standard query (0)	apps.procuraduria.gov.co	65	IN (0x0001)	false
Oct 3, 2024 23:42:28.640613079 CEST	192.168.2.5	1.1.1.1	0x917d	Standard query (0)	apps.procuraduria.gov.co	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:42:28.640727043 CEST	192.168.2.5	1.1.1.1	0xd27f	Standard query (0)	apps.procuraduria.gov.co	65	IN (0x0001)	false
Oct 3, 2024 23:42:30.998188019 CEST	192.168.2.5	1.1.1.1	0x3445	Standard query (0)	apps.procuraduria.gov.co	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:42:30.998435974 CEST	192.168.2.5	1.1.1.1	0xbdeb	Standard query (0)	apps.procuraduria.gov.co	65	IN (0x0001)	false
Oct 3, 2024 23:42:32.062556028 CEST	192.168.2.5	1.1.1.1	0x751c	Standard query (0)	apps.procuraduria.gov.co	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:42:32.298037052 CEST	192.168.2.5	1.1.1.1	0x5fe6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:42:32.298233032 CEST	192.168.2.5	1.1.1.1	0x6a79	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 3, 2024 23:42:14.454607964 CEST	1.1.1.1	192.168.2.5	0x56e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:42:14.454607964 CEST	1.1.1.1	192.168.2.5	0x56e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:42:14.687697887 CEST	1.1.1.1	192.168.2.5	0x87f8	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 23:42:29.152024031 CEST	1.1.1.1	192.168.2.5	0x917d	No error (0)	apps.procuraduria.gov.co		52.142.17.242	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:42:29.621664047 CEST	1.1.1.1	192.168.2.5	0x15b9	No error (0)	apps.procuraduria.gov.co		52.142.17.242	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:42:32.241132975 CEST	1.1.1.1	192.168.2.5	0x3445	No error (0)	apps.procuraduria.gov.co		52.142.17.242	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:42:32.305428028 CEST	1.1.1.1	192.168.2.5	0x6a79	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 23:42:32.305460930 CEST	1.1.1.1	192.168.2.5	0x5fe6	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 3, 2024 23:42:33.307200909 CEST	1.1.1.1	192.168.2.5	0x751c	No error (0)	apps.procuraduria.gov.co		52.142.17.242	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

armmf.adobe.com

otelrules.azureedge.net

apps.procuraduria.gov.co

https:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-03 21:42:10 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=241383 Date: Thu, 03 Oct 2024 21:42:10 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:10 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-03 21:42:11 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=241457 Date: Thu, 03 Oct 2024 21:42:11 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-03 21:42:11 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:15 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ogYVvcyAVk2YBOn&MD=MKaV32LZ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-03 21:42:15 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 9e294fd1-4d78-4b8b-a544-9a40134be6ef MS-RequestId: f83b3c58-2b29-494e-aa40-1a6b7c3a44c6 MS-CV: iId62pBPPkmc/ujZ.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 03 Oct 2024 21:42:15 GMT Connection: close Content-Length: 24490
2024-10-03 21:42:15 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-03 21:42:15 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	96.17.64.189	443	7300	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:15 UTC	475	OUT	GET /onboarding/smskillreader.txt HTTP/1.1 Host: armmf.adobe.com Connection: keep-alive Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br If-None-Match: "78-5faa31cce96da" If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
2024-10-03 21:42:15 UTC	198	IN	HTTP/1.1 304 Not Modified Content-Type: text/plain; charset=UTF-8 Last-Modified: Mon, 01 May 2023 15:02:33 GMT ETag: "78-5faa31cce96da" Date: Thu, 03 Oct 2024 21:42:15 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:15 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:15 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:15 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 30 Sep 2024 13:16:38 GMT ETag: "0x8DCE1521DF74B57" x-ms-request-id: 90766f9b-701e-006f-578c-15afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214215Z-15767c5fc55whfstvfw43u8fp40000000bsg000000007qgt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:15 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-03 21:42:15 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-03 21:42:15 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-03 21:42:16 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-03 21:42:16 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-03 21:42:16 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-03 21:42:16 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-03 21:42:16 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-03 21:42:16 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-03 21:42:16 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:16 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:16 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1cc2ff82-e01e-0071-478c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214216Z-15767c5fc55w69c2zvnrz0gmgw0000000br000000000rtd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:16 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:16 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:16 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 4b0a31e7-c01e-00ad-448c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214216Z-15767c5fc55852fxfeh7csa2dn0000000bfg00000000e8ka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:16 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:16 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:16 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: b9d87bc4-001e-008d-138c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214216Z-15767c5fc55rv8zjq9dg0musxg0000000bp0000000006a43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:16 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:16 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:16 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 39d43082-801e-00ac-658c-15fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214216Z-15767c5fc55gs96cphvgp5f5vc0000000bg000000000cxky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:16 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:16 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:16 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:16 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9d87bc3-001e-008d-128c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214216Z-15767c5fc55852fxfeh7csa2dn0000000bm0000000002mf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-03 21:42:16 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:17 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:17 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b2393cc3-501e-005b-768c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214217Z-15767c5fc55n4msds84xh4z67w00000005c00000000031rx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:18 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:17 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 24b39cfc-301e-0096-2a8c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214217Z-15767c5fc55xsgnlxyxy40f4m00000000bk0000000005dhh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:17 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: aa8826a4-b01e-0053-608c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214217Z-15767c5fc554l9xf959gp9cb1s00000005vg000000002kap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:17 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:17 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 3a0dc1eb-601e-0032-608c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214217Z-15767c5fc55852fxfeh7csa2dn0000000bmg000000000ywm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:18 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:17 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 757ce4f4-401e-000a-128c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214217Z-15767c5fc55gs96cphvgp5f5vc0000000bgg00000000ayd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:18 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 023e3708-a01e-003d-568c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214218Z-15767c5fc55kg97hfq5uqyxxaw0000000br0000000000n3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:18 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 023e3944-a01e-003d-708c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214218Z-15767c5fc55whfstvfw43u8fp40000000bpg00000000k356 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:18 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 1cc301c6-e01e-0071-6b8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214218Z-15767c5fc55472x4k7dmphmadg0000000bb0000000004dx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:18 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1cc301ca-e01e-0071-6f8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214218Z-15767c5fc55w69c2zvnrz0gmgw0000000bx0000000003hfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:18 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: e0871f45-901e-00a0-0d8c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214218Z-15767c5fc552g4w83buhsr3htc0000000bkg00000000ff4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:19 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:19 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 24b39fc0-301e-0096-298c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214219Z-15767c5fc55rv8zjq9dg0musxg0000000bk000000000g2ty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:19 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:19 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:19 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 79ade187-001e-0065-788c-150b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214219Z-15767c5fc55whfstvfw43u8fp40000000bu00000000025hk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:19 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:19 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: c54fb296-901e-008f-528c-1567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214219Z-15767c5fc55ncqdn59ub6rndq00000000bb0000000004abt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:19 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:19 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: dc68ccfc-201e-006e-438c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214219Z-15767c5fc554wklc0x4mc5pq0w0000000bv000000000qz4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:19 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:19 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: a68dfe67-f01e-0052-588c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214219Z-15767c5fc55rg5b7sh1vuv8t7n0000000bwg00000000hbgc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-03 21:42:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:20 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8e9c869d-201e-000c-4b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214220Z-15767c5fc55gq5fmm10nm5qqr80000000btg000000003d41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:20 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 09e6f7ee-001e-0034-548c-15dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214220Z-15767c5fc55rg5b7sh1vuv8t7n0000000c0g000000002x32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:20 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:20 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f10c824-e01e-0085-1c8c-15c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214220Z-15767c5fc55qkvj6n60pxm9mbw00000000r000000000frnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-03 21:42:20 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:20 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0da94923-701e-0097-168c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214220Z-15767c5fc55d6fcl6x6bw8cpdc0000000bcg00000000tbe8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:20 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:20 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 82f8b22c-c01e-0014-5a8c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214220Z-15767c5fc55dtdv4d4saq7t47n0000000beg000000004r5c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:20 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:21 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:21 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 30fd46b0-d01e-00a1-368c-1535b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214221Z-15767c5fc5546rn6ch9zv310e000000004gg00000000hths x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:21 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:21 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6a901ce3-301e-005d-708c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214221Z-15767c5fc552g4w83buhsr3htc0000000bmg00000000c7s2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:21 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:21 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 831ef799-b01e-0098-7b8c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214221Z-15767c5fc55lghvzbxktxfqntw0000000bbg000000005nzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:21 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c2ca9d4d-801e-0035-458c-15752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214221Z-15767c5fc55gs96cphvgp5f5vc0000000bg000000000cxvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:21 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 75493038-e01e-00aa-508c-15ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214221Z-15767c5fc55472x4k7dmphmadg0000000b8000000000f207 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:21 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:21 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a7623418-001e-00a2-348c-15d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214221Z-15767c5fc552g4w83buhsr3htc0000000bkg00000000ffc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:21 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:21 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 4b0a3852-c01e-00ad-3b8c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214221Z-15767c5fc55fdfx81a30vtr1fw0000000bwg00000000hsz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:21 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:21 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: eccf174e-001e-0079-238c-1512e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214221Z-15767c5fc55472x4k7dmphmadg0000000b6g00000000mc66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-03 21:42:21 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:21 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:21 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: bb2e28bd-501e-0016-0b8c-15181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214221Z-15767c5fc55w69c2zvnrz0gmgw0000000bw0000000006xa7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:21 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:21 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:21 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 76615707-c01e-0082-6a8c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214221Z-15767c5fc55n4msds84xh4z67w00000005a0000000009h8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:22 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:22 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4da5bf60-a01e-0070-668c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214222Z-15767c5fc55tsfp92w7yna557w0000000bm000000000dp94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:22 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:22 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:22 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 0dcb6c6d-e01e-0003-668c-150fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214222Z-15767c5fc552g4w83buhsr3htc0000000bk000000000hdc4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:22 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:22 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 8789ddbb-a01e-0084-6a8c-159ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214222Z-15767c5fc55w69c2zvnrz0gmgw0000000bv000000000aamm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:22 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:22 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:22 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 9bed673a-001e-0046-278c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214222Z-15767c5fc55xsgnlxyxy40f4m00000000bh0000000008ek8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:22 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:22 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:22 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 772ea1ab-e01e-003c-188c-15c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214222Z-15767c5fc55fdfx81a30vtr1fw0000000bx000000000fs35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:22 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:23 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:23 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3a0dcc46-601e-0032-6c8c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214223Z-15767c5fc55d6fcl6x6bw8cpdc0000000bf000000000fsvp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:23 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:23 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:23 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 1f480944-c01e-002b-018c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214223Z-15767c5fc552g4w83buhsr3htc0000000bp0000000006k9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:23 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:23 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:23 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 15fe0b87-a01e-0002-3b8c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214223Z-15767c5fc55852fxfeh7csa2dn0000000bk0000000006m40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:23 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:23 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:23 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: c54fbac1-901e-008f-588c-1567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214223Z-15767c5fc55v7j95gq2uzq37a00000000bwg000000004s6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:23 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:23 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:23 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:23 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 75858473-001e-000b-318c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214223Z-15767c5fc55kg97hfq5uqyxxaw0000000br0000000000nex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-03 21:42:23 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:24 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 76252b1b-c01e-0066-488c-15a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214224Z-15767c5fc55rg5b7sh1vuv8t7n0000000bx000000000ebt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:24 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9a197f6-401e-0078-3b8c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214224Z-15767c5fc55qkvj6n60pxm9mbw00000000r000000000frse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-03 21:42:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:24 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2f8443ca-b01e-0070-308c-151cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214224Z-15767c5fc554w2fgapsyvy8ua00000000b6g000000001qrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:24 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b83a8dc4-f01e-003f-308c-15d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214224Z-15767c5fc55lghvzbxktxfqntw0000000b8g00000000fgmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:24 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7be6812e-d01e-008e-528c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214224Z-15767c5fc55rv8zjq9dg0musxg0000000bm000000000brsp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:24 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 1f480aea-c01e-002b-028c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214224Z-15767c5fc55gs96cphvgp5f5vc0000000bc000000000w46q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:24 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7be6821c-d01e-008e-398c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214224Z-15767c5fc554wklc0x4mc5pq0w0000000bxg00000000cwfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:24 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: aa883537-b01e-0053-4c8c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214224Z-15767c5fc55rg5b7sh1vuv8t7n0000000c1g0000000001pt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:24 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 16d3a614-701e-0032-288c-15a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214224Z-15767c5fc5546rn6ch9zv310e000000004p0000000002gc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:24 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: cce0beff-001e-0082-398c-155880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214224Z-15767c5fc55rg5b7sh1vuv8t7n0000000c0g000000002xhb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:25 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:25 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: dc68dac5-201e-006e-298c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214225Z-15767c5fc55fdfx81a30vtr1fw0000000bzg0000000063bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:25 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:25 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:25 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: be018b72-401e-0035-7e8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214225Z-15767c5fc55n4msds84xh4z67w000000059000000000d4cf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:25 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:25 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:25 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4da5c699-a01e-0070-198c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214225Z-15767c5fc55w69c2zvnrz0gmgw0000000bxg000000001xg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:25 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:25 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: be018b82-401e-0035-0c8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214225Z-15767c5fc552g4w83buhsr3htc0000000bmg00000000c7y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:25 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:25 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 801e2bd2-b01e-0021-6a8c-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214225Z-15767c5fc55qdcd62bsn50hd6s0000000b9g00000000pw6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:25 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:26 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 15fe14b4-a01e-0002-638c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214226Z-15767c5fc5546rn6ch9zv310e000000004k000000000d4sg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:26 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 285c7e33-c01e-008e-718c-157381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214226Z-15767c5fc55ncqdn59ub6rndq00000000bcg0000000005ex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-03 21:42:26 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:26 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:26 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 04c46130-501e-0064-028c-151f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214226Z-15767c5fc552g4w83buhsr3htc0000000bq0000000003812 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:26 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:26 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:26 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 6a902a44-301e-005d-788c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214226Z-15767c5fc55d6fcl6x6bw8cpdc0000000bc000000000usys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:26 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:27 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 4da5c882-a01e-0070-628c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214227Z-15767c5fc55kg97hfq5uqyxxaw0000000bq000000000328f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:27 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:27 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 15fe1592-a01e-0002-378c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214227Z-15767c5fc55whfstvfw43u8fp40000000bs00000000093sx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:27 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:27 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:27 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: b9a19b13-401e-0078-148c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214227Z-15767c5fc5546rn6ch9zv310e000000004gg00000000htz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:27 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:27 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 9bed6e8e-001e-0046-5b8c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214227Z-15767c5fc55v7j95gq2uzq37a00000000brg00000000pknf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:28 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dcc4dd0d-f01e-0099-7c8c-159171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214228Z-15767c5fc55rv8zjq9dg0musxg0000000bg000000000r6cu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:28 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 766164d5-c01e-0082-668c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214228Z-15767c5fc55kg97hfq5uqyxxaw0000000bkg00000000drwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:28 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e08726cd-901e-00a0-738c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214228Z-15767c5fc55d6fcl6x6bw8cpdc0000000bh0000000008n48 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:28 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:28 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d59d44fd-601e-003e-698c-153248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214228Z-15767c5fc55jdxmppy6cmd24bn00000003wg000000005d1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:28 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:28 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 1cc309a5-e01e-0071-358c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214228Z-15767c5fc55n4msds84xh4z67w00000005ag000000008wr5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:28 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:29 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 8e9c9a52-201e-000c-6b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214229Z-15767c5fc55rg5b7sh1vuv8t7n0000000bwg00000000hc5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:29 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:29 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 4a2177bf-401e-00a3-638c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214229Z-15767c5fc554w2fgapsyvy8ua00000000b3000000000cpx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:29 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:29 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 1cc30b66-e01e-0071-368c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214229Z-15767c5fc55tsfp92w7yna557w0000000bh000000000pa5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:29 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:29 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:29 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4da5cae8-a01e-0070-0e8c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214229Z-15767c5fc55n4msds84xh4z67w00000005d0000000000357 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:29 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:29 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:29 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0da9586c-701e-0097-318c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214229Z-15767c5fc55dtdv4d4saq7t47n0000000b9000000000r23e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:29 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:29 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:29 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: b9a19cb7-401e-0078-068c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214229Z-15767c5fc55gs96cphvgp5f5vc0000000bmg0000000016mh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:29 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49810	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:29 UTC	689	OUT	GET /webcert/ActNombre.aspx HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 21:42:29 UTC	538	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: /WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx Server: Microsoft-IIS/8.5 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:29 GMT Connection: close Content-Length: 174 Set-Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3;Expires=Fri, 03 Oct 2025 21:42:29 GMT;Path=/;HttpOnly Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:29 UTC	174	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 57 45 42 43 45 52 54 2f 45 72 72 6f 72 2e 61 73 70 78 3f 61 73 70 78 65 72 72 6f 72 70 61 74 68 3d 2f 77 65 62 63 65 72 74 2f 41 63 74 4e 6f 6d 62 72 65 2e 61 73 70 78 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:29 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:29 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:29 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 82f8c3b9-c01e-0014-418c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214229Z-15767c5fc554l9xf959gp9cb1s00000005sg00000000cbmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-03 21:42:29 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:29 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:29 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 1cc30bd5-e01e-0071-1a8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214229Z-15767c5fc55whfstvfw43u8fp40000000bpg00000000k3m6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:29 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:29 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:29 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: b23951fc-501e-005b-2a8c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214229Z-15767c5fc55rg5b7sh1vuv8t7n0000000bvg00000000mva7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:29 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:30 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: b9a19e00-401e-0078-388c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214230Z-15767c5fc55gs96cphvgp5f5vc0000000bhg0000000076hh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49811	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:29 UTC	780	OUT	GET /WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3
2024-10-03 21:42:30 UTC	441	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/8.5 Set-Cookie: ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio; path=/; HttpOnly; SameSite=Lax X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:29 GMT Connection: close Content-Length: 12511 Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:30 UTC	3607	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 4d 65 64 69 61 2f 53 74 79 6c 65 2f 43 65 72 74 69 66 69 63 61 64 6f 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 4d 65 64 69 61 2f 53 74 79 6c 65 2f 6a 71 75 65 72 79 2e 72 65 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></title><link href="Media/Style/Certificado.css" rel="stylesheet" /><link href="Media/Style/jquery.re
2024-10-03 21:42:30 UTC	112	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 69 20 65 73 74 65 20 6d 65 6e 73 61 6a 65 20 65 73 20 72 65 63 75 72 72 65 6e 74 65 2c 20 64 69 6c 69 67 65 6e 63 69 65 20 65 6c 20 73 69 67 75 69 65 6e 74 65 20 66 6f 72 6d 75 6c 61 72 69 6f 20 79 20 70 72 6f 6e 74 6f 20 6c 6f 20 63 6f 6e 74 61 63 74 61 72 65 6d 6f Data Ascii: Si este mensaje es recurrente, diligencie el siguiente formulario y pronto lo contactaremo
2024-10-03 21:42:30 UTC	4048	IN	Data Raw: 73 20 70 61 72 61 20 61 74 65 6e 64 65 72 20 73 75 20 73 6f 6c 69 63 69 74 75 64 2e 3c 62 72 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 68 31 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 61 62 6c 65 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 Data Ascii: s para atender su solicitud.<br /> </h1> <br /> <br /> <br /> <table style="text-align: left; vertical-align: top;"> <tr> <t
2024-10-03 21:42:30 UTC	4048	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 64 20 63 6f 6c 73 70 61 6e 3d 22 36 22 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 6e 61 6d 65 3d 22 62 74 6e 45 78 70 6f 72 74 61 72 22 20 76 61 6c 75 65 3d 22 45 6e 76 69 61 72 22 20 6f 6e 63 6c 69 63 6b 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 57 65 62 46 6f 72 6d 5f 44 6f 50 6f 73 74 42 61 63 6b 57 69 74 68 4f 70 74 69 6f 6e 73 28 6e 65 77 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 26 71 75 6f 74 3b 62 74 6e 45 78 70 6f 72 74 61 72 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 20 74 72 75 Data Ascii: <td colspan="6" align="center"> <input type="submit" name="btnExportar" value="Enviar" onclick="javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnExportar", "", tru
2024-10-03 21:42:30 UTC	696	IN	Data Raw: 20 3d 20 22 74 78 74 52 65 73 70 75 65 73 74 61 50 72 65 67 75 6e 74 61 22 3b 0d 0a 52 65 71 75 69 72 65 64 46 69 65 6c 64 56 61 6c 69 64 61 74 6f 72 34 2e 65 72 72 6f 72 6d 65 73 73 61 67 65 20 3d 20 22 49 6e 67 72 65 73 65 20 6c 61 20 72 65 73 70 75 65 73 74 61 20 61 20 6c 61 20 70 72 65 67 75 6e 74 61 20 64 65 20 76 65 72 69 66 69 63 61 63 69 c3 b3 6e 22 3b 0d 0a 52 65 71 75 69 72 65 64 46 69 65 6c 64 56 61 6c 69 64 61 74 6f 72 34 2e 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 20 3d 20 22 31 22 3b 0d 0a 52 65 71 75 69 72 65 64 46 69 65 6c 64 56 61 6c 69 64 61 74 6f 72 34 2e 65 76 61 6c 75 61 74 69 6f 6e 66 75 6e 63 74 69 6f 6e 20 3d 20 22 52 65 71 75 69 72 65 64 46 69 65 6c 64 56 61 6c 69 64 61 74 6f 72 45 76 61 6c 75 61 74 65 49 73 56 61 6c 69 64 22 Data Ascii: = "txtRespuestaPregunta";RequiredFieldValidator4.errormessage = "Ingrese la respuesta a la pregunta de verificacin";RequiredFieldValidator4.validationGroup = "1";RequiredFieldValidator4.evaluationfunction = "RequiredFieldValidatorEvaluateIsValid"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:30 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:30 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 6a90313a-301e-005d-1a8c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214230Z-15767c5fc55852fxfeh7csa2dn0000000bf000000000h1ym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:30 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:30 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:30 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 1392789d-401e-0047-0e8c-158597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214230Z-15767c5fc55whfstvfw43u8fp40000000bm000000000wv4y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:30 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:30 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:30 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 7afec079-601e-000d-468c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214230Z-15767c5fc55sdcjq8ksxt4n9mc00000000vg00000000mhub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49824	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:30 UTC	739	OUT	GET /WEBCERT/Media/Style/Certificado.css HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
2024-10-03 21:42:30 UTC	379	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Fri, 29 Jul 2022 22:04:40 GMT Accept-Ranges: bytes ETag: "8b5c263397a3d81:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:30 GMT Connection: close Content-Length: 10308 Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:30 UTC	3669	IN	Data Raw: ef bb bf 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 0d 0a 2f 2a 20 45 73 74 69 6c 6f 73 20 50 47 4e 2a 2f 0d 0a 0d 0a 2e 63 61 72 64 2d 68 65 61 64 65 72 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 35 32 37 31 39 34 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 6f 6f 74 65 72 50 47 4e 20 Data Ascii: @charset "utf-8";/* Estilos PGN*/.card-header { text-align: center !important; font-size: 18px !important; color: #527194 !important; font-weight: bold !important; background-color: #FFFFFF !important;}.footerPGN
2024-10-03 21:42:30 UTC	112	IN	Data Raw: 42 6f 78 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 32 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 30 36 30 38 46 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 45 73 Data Ascii: Box { border-width: 2px; border-color: #30608F; color: #000000; text-align: left;}/*Es
2024-10-03 21:42:30 UTC	4048	IN	Data Raw: 74 69 6c 6f 20 70 61 72 61 20 44 72 6f 70 44 6f 6d 77 4c 69 73 74 2a 2f 0d 0a 2e 43 6f 6d 62 6f 42 6f 78 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 32 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 30 36 30 38 46 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 45 73 74 69 6c 6f 20 70 61 72 61 20 6c 6f 73 20 62 6f 74 6f 6e 65 73 2a 2f 0d 0a 2e 42 6f 74 6f 6e 65 73 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 30 36 30 38 46 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 46 46 46 46 46 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 20 20 20 Data Ascii: tilo para DropDomwList/.ComboBox { border-width: 2px; border-color: #30608F; color: #000000; text-align: left;}/Estilo para los botones*/.Botones { color: #30608F; background: #FFFFFF; font-weight: bold;
2024-10-03 21:42:30 UTC	2479	IN	Data Raw: 2c 32 35 35 2c 32 35 35 2c 30 2e 32 29 3b 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 70 78 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 2c 20 30 70 78 20 31 70 78 20 30 70 78 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 32 29 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 70 78 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 2c 20 30 70 78 20 31 70 78 20 30 70 78 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 32 29 3b 2a 2f 0d 0a 7d 0d 0a 0d 0a 20 20 20 20 2e 43 68 65 63 6b 42 6f 78 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 4e 4f 27 3b 0d 0a 20 20 20 20 20 20 Data Ascii: ,255,255,0.2); -moz-box-shadow: inset 0px 1px 1px rgba(0,0,0,0.5), 0px 1px 0px rgba(255,255,255,0.2); box-shadow: inset 0px 1px 1px rgba(0,0,0,0.5), 0px 1px 0px rgba(255,255,255,0.2);*/} .CheckBox:after { content: 'NO';

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:30 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:30 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a68e09c4-f01e-0052-148c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214230Z-15767c5fc55qdcd62bsn50hd6s0000000bd000000000aqda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:30 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:30 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:30 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3ef81e2a-f01e-001f-3f8c-155dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214230Z-15767c5fc55jdxmppy6cmd24bn00000003tg00000000gmqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49821	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:30 UTC	745	OUT	GET /WEBCERT/Media/Style/jquery.realperson.css HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
2024-10-03 21:42:30 UTC	377	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 01 Dec 2021 21:34:06 GMT Accept-Ranges: bytes ETag: "8591dc2afbe6d71:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:30 GMT Connection: close Content-Length: 532 Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:30 UTC	532	IN	Data Raw: 2f 2a 20 52 65 61 6c 20 50 65 72 73 6f 6e 20 6a 51 75 65 72 79 20 70 6c 75 67 69 6e 20 73 74 79 6c 65 73 20 76 31 2e 31 2e 31 2e 20 2a 2f 0d 0a 2e 72 65 61 6c 70 65 72 73 6f 6e 2d 63 68 61 6c 6c 65 6e 67 65 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 61 6c 70 65 72 73 6f 6e 2d 74 65 78 74 20 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 78 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 09 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 31 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 70 78 3b Data Ascii: /* Real Person jQuery plugin styles v1.1.1. */.realperson-challenge {display: block;color: #000000;}.realperson-text {font-family: "Courier New",monospace;font-size: 8px;font-weight: bold;letter-spacing: -1px;line-height: 3px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49822	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:30 UTC	721	OUT	GET /WEBCERT/Media/Scripts/jquery.js HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
2024-10-03 21:42:30 UTC	291	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:30 GMT Connection: close Content-Length: 1245 Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:30 UTC	1245	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49820	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:30 UTC	732	OUT	GET /WEBCERT/Media/Scripts/jquery.realperson.js HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
2024-10-03 21:42:30 UTC	291	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:30 GMT Connection: close Content-Length: 1245 Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:30 UTC	1245	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49823	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:30 UTC	845	OUT	GET /WEBCERT/WebResource.axd?d=aMv6dWoJNVK_s7FSAdfSIdp82UErXagsq5mBBotuhnkGKmgi5KYBtd_i9luCpVsdo1l8RZbwXjNyhhnOlZV5D_vy-a8KUthbzCfcHaF54wA1&t=638562381717896622 HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
2024-10-03 21:42:30 UTC	438	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Fri, 03 Oct 2025 19:03:39 GMT Last-Modified: Thu, 11 Jul 2024 00:56:11 GMT Server: Microsoft-IIS/8.5 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:30 GMT Connection: close Content-Length: 23063 Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:30 UTC	3610	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-10-03 21:42:30 UTC	112	IN	Data Raw: 20 69 66 20 28 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 20 21 3d 3d 20 2d 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 20 3d 20 61 63 74 69 6f 6e 2e 73 75 62 73 74 72 28 30 2c 20 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 5f 5f 6e Data Ascii: if (fragmentIndex !== -1) { action = action.substr(0, fragmentIndex); } if (!__n
2024-10-03 21:42:30 UTC	4048	IN	Data Raw: 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 22 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 61 74 68 20 3d 20 61 63 74 69 6f 6e 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 22 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 71 75 65 72 79 49 6e 64 65 78 20 3d 20 61 63 74 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 71 75 65 72 79 49 6e 64 65 78 20 21 3d 3d 20 2d 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 71 75 65 72 79 20 3d 20 61 63 74 69 6f 6e 2e 73 75 62 73 74 72 28 71 75 65 72 79 49 6e 64 65 78 29 3b 0d 0a 20 20 20 20 Data Ascii: onMSDOMBrowser) { var domain = ""; var path = action; var query = ""; var queryIndex = action.indexOf('?'); if (queryIndex !== -1) { query = action.substr(queryIndex);
2024-10-03 21:42:30 UTC	4048	IN	Data Raw: 74 2e 66 6f 72 6d 73 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 61 6c 6c 62 61 63 6b 50 61 72 61 6d 46 69 65 6c 64 45 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 65 46 6f 72 6d 5b 22 5f 5f 45 56 45 4e 54 56 41 4c 49 44 41 54 49 4f 4e 22 5d 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 6c 6c 62 61 63 6b 56 61 6c 69 64 61 74 69 6f 6e 46 69 65 6c 64 45 6c 65 6d 65 6e 74 20 3d 20 78 6d 6c 52 65 71 75 65 73 74 46 72 61 6d 65 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 49 4e 50 55 54 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 56 61 6c 69 64 61 74 69 6f 6e 46 69 65 6c 64 45 6c 65 6d 65 6e 74 2e 74 79 70 65 Data Ascii: t.forms[0].appendChild(callbackParamFieldElement); if (theForm["__EVENTVALIDATION"]) { var callbackValidationFieldElement = xmlRequestFrame.document.createElement("INPUT"); callbackValidationFieldElement.type
2024-10-03 21:42:30 UTC	4048	IN	Data Raw: 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 29 24 2f 69 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 49 6e 69 74 43 61 6c 6c 62 61 63 6b 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 66 6f 72 6d 45 6c 65 6d 65 6e 74 73 20 3d 20 74 68 65 46 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 2c 0d 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 20 3d 20 66 6f 72 6d 45 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0d 0a 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 63 6f 75 6e 74 3b 20 69 Data Ascii: earch\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;function WebForm_InitCallback() { var formElements = theForm.elements, count = formElements.length, element; for (var i = 0; i < count; i
2024-10-03 21:42:30 UTC	192	IN	Data Raw: 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c Data Ascii: m_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__nonMSDOMBrowser) { return window.pageXOffset; } el
2024-10-03 21:42:30 UTC	4048	IN	Data Raw: 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 Data Ascii: se { if (document.documentElement && document.documentElement.scrollLeft) { return document.documentElement.scrollLeft; } else if (document.body) { return document.body.scrollLeft; } }
2024-10-03 21:42:30 UTC	2957	IN	Data Raw: 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 20 26 26 20 74 61 67 4e 61 6d 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 61 67 4e 61 6d 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 2e 61 6c 6c 20 26 26 20 65 6c 65 6d 65 6e 74 2e 61 6c 6c 2e 74 61 67 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 2e 61 6c 6c 2e 74 61 67 73 28 74 61 67 4e 61 6d 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 Data Ascii: if (element && tagName) { if (element.getElementsByTagName) { return element.getElementsByTagName(tagName); } if (element.all && element.all.tags) { return element.all.tags(tagName); }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49825	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:30 UTC	845	OUT	GET /WEBCERT/WebResource.axd?d=b3PHbrCFCNXP35rg-mo31VC2mEj20s-yg6XRKoGdHAUT2jXVG0nlascVO1cf-mJnW4V9GxJZa12ol5IKe-yMcn4oyeTDTBeIVfyRvWPbwGU1&t=638562381717896622 HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
2024-10-03 21:42:30 UTC	438	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Fri, 03 Oct 2025 04:36:00 GMT Last-Modified: Thu, 11 Jul 2024 00:56:11 GMT Server: Microsoft-IIS/8.5 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:30 GMT Connection: close Content-Length: 26951 Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:30 UTC	3610	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-10-03 21:42:30 UTC	112	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 28 63 6f 6e 74 72 6f 6c 2e 76 61 6c 75 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 20 26 26 20 28 63 6f 6e 74 72 6f 6c 2e 74 79 70 65 20 21 3d 20 22 72 61 64 69 6f 22 20 7c 7c 20 63 6f 6e 74 72 6f 6c 2e 63 68 65 63 6b 65 64 20 3d 3d 20 74 72 75 65 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e Data Ascii: if (typeof(control.value) == "string" && (control.type != "radio" \|\| control.checked == true)) { return
2024-10-03 21:42:30 UTC	4048	IN	Data Raw: 20 63 6f 6e 74 72 6f 6c 2e 76 61 6c 75 65 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 69 2c 20 76 61 6c 3b 0d 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 3c 63 6f 6e 74 72 6f 6c 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 20 3d 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 52 65 63 75 72 73 69 76 65 28 63 6f 6e 74 72 6f 6c 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 20 21 3d 20 22 22 29 20 72 65 74 75 72 6e 20 76 61 6c 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 22 22 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 50 61 67 65 5f 43 6c 69 65 6e 74 56 61 6c 69 64 61 74 65 28 76 61 6c 69 Data Ascii: control.value; } var i, val; for (i = 0; i<control.childNodes.length; i++) { val = ValidatorGetValueRecursive(control.childNodes[i]); if (val != "") return val; } return "";}function Page_ClientValidate(vali
2024-10-03 21:42:30 UTC	4048	IN	Data Raw: 79 70 65 6f 66 28 65 76 65 6e 74 43 74 72 6c 2e 69 64 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 76 65 6e 74 43 74 72 6c 2e 69 64 20 3d 3d 20 76 61 6c 2e 63 6f 6e 74 72 6f 6c 68 6f 6f 6b 75 70 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 74 72 6c 20 3d 20 65 76 65 6e 74 43 74 72 6c 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 63 74 72 6c 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 20 28 63 74 72 6c 20 3d 3d 20 6e 75 6c 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 74 72 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 Data Ascii: ypeof(eventCtrl.id) == "string") && (eventCtrl.id == val.controlhookup)) { ctrl = eventCtrl; } } if ((typeof(ctrl) == "undefined") \|\| (ctrl == null)) { ctrl = document.getElementById(val.controltovalid
2024-10-03 21:42:30 UTC	4048	IN	Data Raw: 20 76 61 6c 2e 64 65 63 69 6d 61 6c 63 68 61 72 20 2b 20 22 3f 28 5c 5c 64 2a 29 5c 5c 73 2a 24 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6d 20 3d 20 6f 70 2e 6d 61 74 63 68 28 65 78 70 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 20 3d 3d 20 6e 75 6c 6c 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 5b 32 5d 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 20 26 26 20 6d 5b 33 5d 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 6e 49 6e 70 75 74 20 3d 20 28 6d 5b 31 5d 20 21 3d 20 6e 75 6c 6c 20 3f 20 6d 5b 31 5d 20 3a 20 22 22 29 20 2b 20 28 6d 5b 32 5d 2e 6c 65 6e 67 74 68 3e Data Ascii: val.decimalchar + "?(\\d)\\s$"); m = op.match(exp); if (m == null) return null; if (m[2].length == 0 && m[3].length == 0) return null; cleanInput = (m[1] != null ? m[1] : "") + (m[2].length>
2024-10-03 21:42:30 UTC	192	IN	Data Raw: 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 74 79 70 65 6f 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 6e 75 6c 6c 20 3d 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 29 20 7b 0d 0a 20 Data Ascii: (val.controltocompare) != "string") \|\| (typeof(document.getElementById(val.controltocompare)) == "undefined") \|\| (null == document.getElementById(val.controltocompare))) {
2024-10-03 21:42:31 UTC	4048	IN	Data Raw: 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 76 61 6c 2e 76 61 6c 75 65 74 6f 63 6f 6d 70 61 72 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 76 61 6c 2e 76 61 6c 75 65 74 6f 63 6f 6d 70 61 72 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 6f 70 65 72 61 74 6f 72 20 3d 20 22 45 71 75 61 6c 22 3b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 76 61 6c 2e 6f 70 65 72 61 74 6f 72 29 Data Ascii: if (typeof(val.valuetocompare) == "string") { compareTo = val.valuetocompare; } } else { compareTo = ValidatorGetValue(val.controltocompare); } var operator = "Equal"; if (typeof(val.operator)
2024-10-03 21:42:31 UTC	4048	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 73 75 6d 6d 61 72 79 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 30 2c 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 75 6d 6d 61 72 79 2e 73 68 6f 77 6d 65 73 73 61 67 65 62 6f 78 20 3d 3d 20 22 54 72 75 65 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 22 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 73 75 6d 6d 61 72 79 2e 68 65 61 64 65 72 74 65 78 74 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 2b 3d Data Ascii: summary.innerHTML = s; window.scrollTo(0,0); } if (summary.showmessagebox == "True") { s = ""; if (typeof(summary.headertext) == "string") { s +=
2024-10-03 21:42:31 UTC	2797	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 56 61 6c 69 64 61 74 6f 72 73 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 28 56 61 6c 69 64 61 74 6f 72 4f 6e 4c 6f 61 64 29 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 61 6c 69 64 61 74 6f 72 4f 6e 4c 6f 61 64 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 28 56 61 6c 69 64 61 74 6f 72 4f 6e 53 75 62 6d 69 74 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return length; } function loadValidators() { if (typeof (ValidatorOnLoad) === "function") { ValidatorOnLoad(); } if (typeof (ValidatorOnSubmit) === "undefined") {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49831	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:31 UTC	781	OUT	GET /WEBCERT/Media/Image/refresh.png HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
2024-10-03 21:42:31 UTC	379	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 01 Dec 2021 21:34:06 GMT Accept-Ranges: bytes ETag: "b8a1f42afbe6d71:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:31 GMT Connection: close Content-Length: 1758 Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:31 UTC	1758	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 06 a5 49 44 41 54 58 85 ad 96 7b 8c 54 67 19 87 9f ef 3b 97 b9 ed cc de d8 61 77 d9 9b 03 74 2b 08 88 49 63 02 6a 35 34 52 23 62 4c 4c b1 37 b5 c6 18 8d 44 13 6d 93 da 94 e0 1f 95 d6 54 a3 89 b5 69 4c a9 a4 c1 6e ac a6 24 ad d5 56 1b 2b a9 54 63 29 c5 10 b7 ed 82 30 0b cb 02 7b bf cc cc ce 39 e7 bb f8 c7 8e c0 ec b2 1b 58 78 93 5f 4e 66 f2 9d ef f7 9c f7 7d cf fb 1d c1 22 91 5c b9 9e ae cf dd 47 7d 6b 07 52 d8 b5 6d d9 c6 ad 89 98 ff 21 29 9d 06 cf 73 4b e9 54 3c 3f 31 35 f3 a6 32 f6 0f 91 81 be 37 5e e5 5f 7b 1f c3 96 8b 17 f7 e8 da fc 59 36 6e bf 17 84 e0 c8 81 bd f4 ff e3 cf 55 1e 62 21 f3 95 3b 1f 27 d1 92 23 21 d4 3d a9 b8 f7 68 c2 f7 db ce 5c 18 Data Ascii: PNGIHDR szzIDATX{Tg;awt+Icj54R#bLL7DmTiLn$V+Tc)0{9Xx_Nf}"\G}kRm!)sKT<?1527^_{Y6nUb!;'#!=h\

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:31 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:31 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: a76247f8-001e-00a2-558c-15d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214231Z-15767c5fc55w69c2zvnrz0gmgw0000000bv000000000aavk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:31 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:31 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:31 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7afec1f8-601e-000d-328c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214231Z-15767c5fc55jdxmppy6cmd24bn00000003wg000000005d66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:31 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:31 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4a217eb8-401e-00a3-218c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214231Z-15767c5fc55v7j95gq2uzq37a00000000bv0000000009xys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:31 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:31 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:31 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 92784c80-801e-002a-088c-1531dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214231Z-15767c5fc55tsfp92w7yna557w0000000bng000000008ph5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:31 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:31 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: c825d9ef-901e-007b-278c-15ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214231Z-15767c5fc55472x4k7dmphmadg0000000bc0000000001sc7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:31 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49836	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:32 UTC	761	OUT	GET /favicon.ico HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://apps.procuraduria.gov.co/WEBCERT/Error.aspx?aspxerrorpath=/webcert/ActNombre.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
2024-10-03 21:42:32 UTC	292	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:32 GMT Connection: close Content-Length: 1245 Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:32 UTC	1245	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:32 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:32 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6a90350a-301e-005d-348c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214232Z-15767c5fc55whfstvfw43u8fp40000000bt00000000068v1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:32 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:32 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 76616de5-c01e-0082-6f8c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214232Z-15767c5fc55kg97hfq5uqyxxaw0000000bfg00000000sudy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:32 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:32 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: ed356ac5-101e-0046-2b8c-1591b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214232Z-15767c5fc55472x4k7dmphmadg0000000b8000000000f2r6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:32 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:32 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 29534450-901e-0064-768c-15e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214232Z-15767c5fc55w69c2zvnrz0gmgw0000000bxg000000001xsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:32 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 6ec2e3f4-801e-007b-208c-15e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214232Z-15767c5fc55ncqdn59ub6rndq00000000b5g00000000s657 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49842	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:32 UTC	604	OUT	GET /WEBCERT/WebResource.axd?d=aMv6dWoJNVK_s7FSAdfSIdp82UErXagsq5mBBotuhnkGKmgi5KYBtd_i9luCpVsdo1l8RZbwXjNyhhnOlZV5D_vy-a8KUthbzCfcHaF54wA1&t=638562381717896622 HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
2024-10-03 21:42:33 UTC	438	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Fri, 03 Oct 2025 04:33:36 GMT Last-Modified: Thu, 11 Jul 2024 00:56:11 GMT Server: Microsoft-IIS/8.5 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:32 GMT Connection: close Content-Length: 23063 Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:33 UTC	3610	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-10-03 21:42:33 UTC	112	IN	Data Raw: 20 69 66 20 28 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 20 21 3d 3d 20 2d 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 20 3d 20 61 63 74 69 6f 6e 2e 73 75 62 73 74 72 28 30 2c 20 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 5f 5f 6e Data Ascii: if (fragmentIndex !== -1) { action = action.substr(0, fragmentIndex); } if (!__n
2024-10-03 21:42:33 UTC	4048	IN	Data Raw: 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 22 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 61 74 68 20 3d 20 61 63 74 69 6f 6e 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 22 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 71 75 65 72 79 49 6e 64 65 78 20 3d 20 61 63 74 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 71 75 65 72 79 49 6e 64 65 78 20 21 3d 3d 20 2d 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 71 75 65 72 79 20 3d 20 61 63 74 69 6f 6e 2e 73 75 62 73 74 72 28 71 75 65 72 79 49 6e 64 65 78 29 3b 0d 0a 20 20 20 20 Data Ascii: onMSDOMBrowser) { var domain = ""; var path = action; var query = ""; var queryIndex = action.indexOf('?'); if (queryIndex !== -1) { query = action.substr(queryIndex);
2024-10-03 21:42:33 UTC	4048	IN	Data Raw: 74 2e 66 6f 72 6d 73 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 61 6c 6c 62 61 63 6b 50 61 72 61 6d 46 69 65 6c 64 45 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 65 46 6f 72 6d 5b 22 5f 5f 45 56 45 4e 54 56 41 4c 49 44 41 54 49 4f 4e 22 5d 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 6c 6c 62 61 63 6b 56 61 6c 69 64 61 74 69 6f 6e 46 69 65 6c 64 45 6c 65 6d 65 6e 74 20 3d 20 78 6d 6c 52 65 71 75 65 73 74 46 72 61 6d 65 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 49 4e 50 55 54 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 56 61 6c 69 64 61 74 69 6f 6e 46 69 65 6c 64 45 6c 65 6d 65 6e 74 2e 74 79 70 65 Data Ascii: t.forms[0].appendChild(callbackParamFieldElement); if (theForm["__EVENTVALIDATION"]) { var callbackValidationFieldElement = xmlRequestFrame.document.createElement("INPUT"); callbackValidationFieldElement.type
2024-10-03 21:42:33 UTC	4048	IN	Data Raw: 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 29 24 2f 69 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 49 6e 69 74 43 61 6c 6c 62 61 63 6b 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 66 6f 72 6d 45 6c 65 6d 65 6e 74 73 20 3d 20 74 68 65 46 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 2c 0d 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 20 3d 20 66 6f 72 6d 45 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0d 0a 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 63 6f 75 6e 74 3b 20 69 Data Ascii: earch\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;function WebForm_InitCallback() { var formElements = theForm.elements, count = formElements.length, element; for (var i = 0; i < count; i
2024-10-03 21:42:33 UTC	192	IN	Data Raw: 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c Data Ascii: m_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__nonMSDOMBrowser) { return window.pageXOffset; } el
2024-10-03 21:42:33 UTC	4048	IN	Data Raw: 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 Data Ascii: se { if (document.documentElement && document.documentElement.scrollLeft) { return document.documentElement.scrollLeft; } else if (document.body) { return document.body.scrollLeft; } }
2024-10-03 21:42:33 UTC	2957	IN	Data Raw: 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 20 26 26 20 74 61 67 4e 61 6d 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 61 67 4e 61 6d 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 2e 61 6c 6c 20 26 26 20 65 6c 65 6d 65 6e 74 2e 61 6c 6c 2e 74 61 67 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 2e 61 6c 6c 2e 74 61 67 73 28 74 61 67 4e 61 6d 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 Data Ascii: if (element && tagName) { if (element.getElementsByTagName) { return element.getElementsByTagName(tagName); } if (element.all && element.all.tags) { return element.all.tags(tagName); }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49844	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:32 UTC	604	OUT	GET /WEBCERT/WebResource.axd?d=b3PHbrCFCNXP35rg-mo31VC2mEj20s-yg6XRKoGdHAUT2jXVG0nlascVO1cf-mJnW4V9GxJZa12ol5IKe-yMcn4oyeTDTBeIVfyRvWPbwGU1&t=638562381717896622 HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
2024-10-03 21:42:33 UTC	438	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Fri, 03 Oct 2025 04:36:00 GMT Last-Modified: Thu, 11 Jul 2024 00:56:11 GMT Server: Microsoft-IIS/8.5 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:32 GMT Connection: close Content-Length: 26951 Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:33 UTC	3610	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-10-03 21:42:33 UTC	112	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 28 63 6f 6e 74 72 6f 6c 2e 76 61 6c 75 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 20 26 26 20 28 63 6f 6e 74 72 6f 6c 2e 74 79 70 65 20 21 3d 20 22 72 61 64 69 6f 22 20 7c 7c 20 63 6f 6e 74 72 6f 6c 2e 63 68 65 63 6b 65 64 20 3d 3d 20 74 72 75 65 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e Data Ascii: if (typeof(control.value) == "string" && (control.type != "radio" \|\| control.checked == true)) { return
2024-10-03 21:42:33 UTC	4048	IN	Data Raw: 20 63 6f 6e 74 72 6f 6c 2e 76 61 6c 75 65 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 69 2c 20 76 61 6c 3b 0d 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 3c 63 6f 6e 74 72 6f 6c 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 20 3d 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 52 65 63 75 72 73 69 76 65 28 63 6f 6e 74 72 6f 6c 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 20 21 3d 20 22 22 29 20 72 65 74 75 72 6e 20 76 61 6c 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 22 22 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 50 61 67 65 5f 43 6c 69 65 6e 74 56 61 6c 69 64 61 74 65 28 76 61 6c 69 Data Ascii: control.value; } var i, val; for (i = 0; i<control.childNodes.length; i++) { val = ValidatorGetValueRecursive(control.childNodes[i]); if (val != "") return val; } return "";}function Page_ClientValidate(vali
2024-10-03 21:42:33 UTC	4048	IN	Data Raw: 79 70 65 6f 66 28 65 76 65 6e 74 43 74 72 6c 2e 69 64 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 76 65 6e 74 43 74 72 6c 2e 69 64 20 3d 3d 20 76 61 6c 2e 63 6f 6e 74 72 6f 6c 68 6f 6f 6b 75 70 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 74 72 6c 20 3d 20 65 76 65 6e 74 43 74 72 6c 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 63 74 72 6c 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 20 28 63 74 72 6c 20 3d 3d 20 6e 75 6c 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 74 72 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 Data Ascii: ypeof(eventCtrl.id) == "string") && (eventCtrl.id == val.controlhookup)) { ctrl = eventCtrl; } } if ((typeof(ctrl) == "undefined") \|\| (ctrl == null)) { ctrl = document.getElementById(val.controltovalid
2024-10-03 21:42:33 UTC	4048	IN	Data Raw: 20 76 61 6c 2e 64 65 63 69 6d 61 6c 63 68 61 72 20 2b 20 22 3f 28 5c 5c 64 2a 29 5c 5c 73 2a 24 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6d 20 3d 20 6f 70 2e 6d 61 74 63 68 28 65 78 70 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 20 3d 3d 20 6e 75 6c 6c 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 5b 32 5d 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 20 26 26 20 6d 5b 33 5d 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 6e 49 6e 70 75 74 20 3d 20 28 6d 5b 31 5d 20 21 3d 20 6e 75 6c 6c 20 3f 20 6d 5b 31 5d 20 3a 20 22 22 29 20 2b 20 28 6d 5b 32 5d 2e 6c 65 6e 67 74 68 3e Data Ascii: val.decimalchar + "?(\\d)\\s$"); m = op.match(exp); if (m == null) return null; if (m[2].length == 0 && m[3].length == 0) return null; cleanInput = (m[1] != null ? m[1] : "") + (m[2].length>
2024-10-03 21:42:33 UTC	192	IN	Data Raw: 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 74 79 70 65 6f 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 6e 75 6c 6c 20 3d 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 29 20 7b 0d 0a 20 Data Ascii: (val.controltocompare) != "string") \|\| (typeof(document.getElementById(val.controltocompare)) == "undefined") \|\| (null == document.getElementById(val.controltocompare))) {
2024-10-03 21:42:33 UTC	4048	IN	Data Raw: 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 76 61 6c 2e 76 61 6c 75 65 74 6f 63 6f 6d 70 61 72 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 76 61 6c 2e 76 61 6c 75 65 74 6f 63 6f 6d 70 61 72 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 6f 70 65 72 61 74 6f 72 20 3d 20 22 45 71 75 61 6c 22 3b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 76 61 6c 2e 6f 70 65 72 61 74 6f 72 29 Data Ascii: if (typeof(val.valuetocompare) == "string") { compareTo = val.valuetocompare; } } else { compareTo = ValidatorGetValue(val.controltocompare); } var operator = "Equal"; if (typeof(val.operator)
2024-10-03 21:42:33 UTC	4048	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 73 75 6d 6d 61 72 79 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 30 2c 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 75 6d 6d 61 72 79 2e 73 68 6f 77 6d 65 73 73 61 67 65 62 6f 78 20 3d 3d 20 22 54 72 75 65 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 22 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 73 75 6d 6d 61 72 79 2e 68 65 61 64 65 72 74 65 78 74 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 2b 3d Data Ascii: summary.innerHTML = s; window.scrollTo(0,0); } if (summary.showmessagebox == "True") { s = ""; if (typeof(summary.headertext) == "string") { s +=
2024-10-03 21:42:33 UTC	2797	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 56 61 6c 69 64 61 74 6f 72 73 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 28 56 61 6c 69 64 61 74 6f 72 4f 6e 4c 6f 61 64 29 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 61 6c 69 64 61 74 6f 72 4f 6e 4c 6f 61 64 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 28 56 61 6c 69 64 61 74 6f 72 4f 6e 53 75 62 6d 69 74 29 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return length; } function loadValidators() { if (typeof (ValidatorOnLoad) === "function") { ValidatorOnLoad(); } if (typeof (ValidatorOnSubmit) === "undefined") {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49843	52.142.17.242	443	7916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:32 UTC	480	OUT	GET /WEBCERT/Media/Image/refresh.png HTTP/1.1 Host: apps.procuraduria.gov.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiesession1=678A3E0F208A0BFB7D96ADDA2635F4F3; ASP.NET_SessionId=x2kulnokl4nqlu5cq21cpuio
2024-10-03 21:42:33 UTC	379	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 01 Dec 2021 21:34:06 GMT Accept-Ranges: bytes ETag: "b8a1f42afbe6d71:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Thu, 03 Oct 2024 21:42:32 GMT Connection: close Content-Length: 1758 Content-Security-Policy: default-src self X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-10-03 21:42:33 UTC	1758	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 06 a5 49 44 41 54 58 85 ad 96 7b 8c 54 67 19 87 9f ef 3b 97 b9 ed cc de d8 61 77 d9 9b 03 74 2b 08 88 49 63 02 6a 35 34 52 23 62 4c 4c b1 37 b5 c6 18 8d 44 13 6d 93 da 94 e0 1f 95 d6 54 a3 89 b5 69 4c a9 a4 c1 6e ac a6 24 ad d5 56 1b 2b a9 54 63 29 c5 10 b7 ed 82 30 0b cb 02 7b bf cc cc ce 39 e7 bb f8 c7 8e c0 ec b2 1b 58 78 93 5f 4e 66 f2 9d ef f7 9c f7 7d cf fb 1d c1 22 91 5c b9 9e ae cf dd 47 7d 6b 07 52 d8 b5 6d d9 c6 ad 89 98 ff 21 29 9d 06 cf 73 4b e9 54 3c 3f 31 35 f3 a6 32 f6 0f 91 81 be 37 5e e5 5f 7b 1f c3 96 8b 17 f7 e8 da fc 59 36 6e bf 17 84 e0 c8 81 bd f4 ff e3 cf 55 1e 62 21 f3 95 3b 1f 27 d1 92 23 21 d4 3d a9 b8 f7 68 c2 f7 db ce 5c 18 Data Ascii: PNGIHDR szzIDATX{Tg;awt+Icj54R#bLL7DmTiLn$V+Tc)0{9Xx_Nf}"\G}kRm!)sKT<?1527^_{Y6nUb!;'#!=h\

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:33 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 704395e8-201e-005d-718c-15afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214233Z-15767c5fc55d6fcl6x6bw8cpdc0000000bc000000000ut50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:33 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 0da95f5c-701e-0097-318c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214233Z-15767c5fc554w2fgapsyvy8ua00000000b4g000000007vkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:33 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:33 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: dc68e902-201e-006e-0d8c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214233Z-15767c5fc55qdcd62bsn50hd6s0000000be0000000006fvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:33 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:33 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:33 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 21dfe39b-001e-0049-468c-155bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214233Z-15767c5fc554l9xf959gp9cb1s00000005s000000000dpm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:33 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:33 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 8be9c1e7-301e-0052-678c-1565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214233Z-15767c5fc55n4msds84xh4z67w00000005bg00000000485k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:33 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 82f8cc24-c01e-0014-3a8c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214233Z-15767c5fc55kg97hfq5uqyxxaw0000000bn0000000009bma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-03 21:42:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:33 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ba3c7a68-301e-0099-698c-156683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214233Z-15767c5fc55852fxfeh7csa2dn0000000bm0000000002ncs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:33 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 819d4321-f01e-0020-6e8c-15956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214233Z-15767c5fc552g4w83buhsr3htc0000000bm000000000e8dy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:33 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:33 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 023e591f-a01e-003d-618c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214233Z-15767c5fc5546rn6ch9zv310e000000004f000000000rbg5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:33 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:34 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: fb0d4061-601e-0050-198c-152c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214234Z-15767c5fc55qkvj6n60pxm9mbw00000000q000000000n967 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:34 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 89fd357a-501e-008f-758c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214234Z-15767c5fc55472x4k7dmphmadg0000000b9000000000arvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:34 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 831f1653-b01e-0098-198c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214234Z-15767c5fc55fdfx81a30vtr1fw0000000bug00000000sawr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:35 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7585955c-001e-000b-518c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214235Z-15767c5fc554l9xf959gp9cb1s00000005v0000000004e3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:35 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: a7582d38-101e-0028-528c-158f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214235Z-15767c5fc55rv8zjq9dg0musxg0000000br0000000000sp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:35 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 757cff4f-401e-000a-528c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214235Z-15767c5fc55tsfp92w7yna557w0000000bm000000000dpwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:35 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: a68e0dd8-f01e-0052-1d8c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214235Z-15767c5fc55w69c2zvnrz0gmgw0000000bsg00000000ksu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:36 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: b2395a75-501e-005b-038c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214236Z-15767c5fc5546rn6ch9zv310e000000004eg00000000segd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:36 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:36 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 76253f94-c01e-0066-328c-15a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214236Z-15767c5fc55whfstvfw43u8fp40000000bp000000000nb70 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:36 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:36 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 9bed7ce1-001e-0046-4f8c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214236Z-15767c5fc55qdcd62bsn50hd6s0000000be0000000006g14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:36 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 819d44cb-f01e-0020-6f8c-15956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214236Z-15767c5fc55rv8zjq9dg0musxg0000000bg000000000r6w7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:36 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 7baaa16d-b01e-0097-4d8c-154f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214236Z-15767c5fc55472x4k7dmphmadg0000000b6g00000000mcys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:37 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:37 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 89fd37a1-501e-008f-6d8c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214237Z-15767c5fc55gq5fmm10nm5qqr80000000bm000000000s9pw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:37 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:37 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:37 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: be019976-401e-0035-5d8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214237Z-15767c5fc55v7j95gq2uzq37a00000000bqg00000000smsz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:37 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:37 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:37 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 9c5056bf-f01e-0003-548c-154453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214237Z-15767c5fc5546rn6ch9zv310e000000004f000000000rbna x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:37 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:37 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:37 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 42bb1403-701e-005c-578c-15bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214237Z-15767c5fc55ncqdn59ub6rndq00000000b6000000000qaxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:37 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:38 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:38 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 2d1829d7-b01e-001e-738c-150214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214238Z-15767c5fc55xsgnlxyxy40f4m00000000bgg000000009yxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:38 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:38 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:38 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 2f845d93-b01e-0070-2f8c-151cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214238Z-15767c5fc55sdcjq8ksxt4n9mc00000000t000000000x8vr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:38 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:38 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:38 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 5f7380a8-801e-0015-7b8c-15f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214238Z-15767c5fc55852fxfeh7csa2dn0000000bfg00000000e9h4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-03 21:42:38 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:38 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:38 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: be019a9f-401e-0035-518c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214238Z-15767c5fc55kg97hfq5uqyxxaw0000000bfg00000000supb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-03 21:42:38 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:38 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:38 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 36a1620f-001e-0028-0f8c-15c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214238Z-15767c5fc55whfstvfw43u8fp40000000bqg00000000ezz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:38 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:38 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:38 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e360128a-801e-0083-498c-15f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214238Z-15767c5fc55jdxmppy6cmd24bn00000003sg00000000kwwk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:39 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:39 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:39 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b0a4db7-c01e-00ad-2d8c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214239Z-15767c5fc55rv8zjq9dg0musxg0000000bm000000000bsf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:39 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:39 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:39 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 1cc313a1-e01e-0071-4b8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214239Z-15767c5fc55d6fcl6x6bw8cpdc0000000bh0000000008nmq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:39 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 21:42:39 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-03 21:42:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 21:42:39 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 4b0a4edd-c01e-00ad-438c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241003T214239Z-15767c5fc554wklc0x4mc5pq0w0000000byg000000009nry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-03 21:42:39 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: Acrobat.exePID: 5400, Parent PID: 1028

General

Target ID:	0
Start time:	17:42:00
Start date:	03/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DISCIPLIARIO.pdf"
Imagebase:	0x7ff686a00000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: AcroCEF.exePID: 2472, Parent PID: 5400

General

Target ID:	2
Start time:	17:42:01
Start date:	03/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: AcroCEF.exePID: 7300, Parent PID: 2472

General

Target ID:	4
Start time:	17:42:01
Start date:	03/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1596,i,17713581128487194489,5467165853886830255,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6208, Parent PID: 5568

General

Target ID:	8
Start time:	17:42:25
Start date:	03/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://apps.procuraduria.gov.co/webcert/ActNombre.aspx"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7916, Parent PID: 6208

General

Target ID:	9
Start time:	17:42:26
Start date:	03/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2204,i,485188839462988559,9413751380706042672,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report DISCIPLIARIO.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\879b0736-4dab-4f05-b3d8-00be7fe5a96f.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241003214206Z-158.bmp

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Windows Analysis Report
DISCIPLIARIO.pdf