Edit tour

Windows Analysis Report
https://vestliaresort-my.sharepoint.com/:o:/g/personal/ziga_vestlia_no/Eky579E0q2lOhPOUshOGsHcBMaZdCfwRcrEzHT2ZmUZxNA?e=ksWeaa

Overview

General Information

Sample URL:	https://vestliaresort-my.sharepoint.com/:o:/g/personal/ziga_vestlia_no/Eky579E0q2lOhPOUshOGsHcBMaZdCfwRcrEzHT2ZmUZxNA?e=ksWeaa
Analysis ID:	1526017
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Invalid 'sign-in options' or 'sign-up' link found

Stores files to the Windows start menu directory

Suspicious form URL found

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 728 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2344,i,15669229168429719209,4895585725098136349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://vestliaresort-my.sharepoint.com/:o:/g/personal/ziga_vestlia_no/Eky579E0q2lOhPOUshOGsHcBMaZdCfwRcrEzHT2ZmUZxNA?e=ksWeaa" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /o/RemoteTelemetry.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88 HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveContent-Length: 115sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://vestliaresort-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://vestliaresort-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 503 Service UnavailableCache-Control: privateTransfer-Encoding: chunkedContent-Type: text/htmlP3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: 7c49c23b-dc55-4356-9872-cf9b310dc433X-UserSessionId: 7c49c23b-dc55-4356-9872-cf9b310dc433Strict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: AM4PEPF0000B702X-OfficeVersion: 16.0.18006.41011X-OfficeCluster: GEU8X-Partitioning-Enabled: trueX-Content-Type-Options: nosniffX-Download-Options: noopenContent-Disposition: attachmentX-OFFICEFD: AM4PEPF0000B702X-WacFrontEnd: AM4PEPF0000B702X-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_controlX-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_controlX-MSEdge-Ref: Ref A: 1FF4EE02973C49498E1FD0D1EEE3CA73 Ref B: EWR311000105037 Ref C: 2024-10-04T14:44:57ZDate: Fri, 04 Oct 2024 14:44:56 GMTConnection: close

Source: chromecache_100.1.dr, chromecache_122.1.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_130.1.dr	String found in binary or memory: http://www.mozilla.org/newlayout/xml/parsererror.xml
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://1drv.ms
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://attributes.engagement.office-int.com
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://attributes.engagement.office.com
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://attributes.engagement.officeppe.com
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://cdn.dev.fluidpreview.office.net
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://cdn.dev.fluidpreview.office.net/fluid/dev
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://cdn.dev.fluidpreview.office.net/fluid/stg
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://cdn.fluidpreview.office.net
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://cdn.fluidpreview.office.net/fluid/df
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://cdn.fluidpreview.office.net/fluid/gcc
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://cdn.fluidpreview.office.net/fluid/prod
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://contentstorage.osi.office.net/images/2f4febe2cca96f7f.gif
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://contentstorage.osi.office.net/images/eb14b3fe6a1e1671.png
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://ecs.office.com
Source: chromecache_134.1.dr, chromecache_107.1.dr	String found in binary or memory: https://euc-onenote.officeapps.live.com/o/RemoteUls.ashx
Source: chromecache_130.1.dr	String found in binary or memory: https://fa000000096.resources.office.net
Source: chromecache_130.1.dr	String found in binary or memory: https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2210.23001/en-us_w
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2401.26003/en-us_w
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://feross.org
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: chromecache_122.1.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://res-dod.cdn.office.net
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://res-dod.cdn.office.net/fluid/dod
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://res-gcch.cdn.office.net
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://res-gcch.cdn.office.net/fluid/gcch
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://res-sdf.cdn.office.net
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://res.cdn.office.net
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://roaming.edog.officeapps.live.com/rs/v1/settings
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://roaming.officeapps.live.com/rs/v1/settings
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://roaming.officeapps.partner.office365.cn/rs/v1/settings
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://roaming.osi.apps.mil/rs/v1/settings
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://roaming.osi.office.de/rs/v1/settings
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://roaming.osi.office365.us/rs/v1/settings
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://support.office.com/article/7afcb4f3-4aa2-443a-9b08-125a5d692576
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://whiteboard.apps.mil
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://whiteboard.eaglex.ic.gov
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://whiteboard.microsoft.scloud
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://whiteboard.office.com/root/index.fluid.js
Source: chromecache_104.1.dr, chromecache_130.1.dr	String found in binary or memory: https://whiteboard.office365.us

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49730 version: TLS 1.2

Source: chromecache_104.1.dr, chromecache_130.1.dr

Binary or memory string: new y.a(u.a.zd());const G=".3gp .aa .aac .aax .act .aiff .amr .ape .au .awb .dct .dss .dvf .flac .gsm .iklax .ivs .m4a .m4b .m4p .mmf .mp3 .mpc .msv .ogg .oga .mogg .opus .ra .rm .raw .sln .tta .vox .wav .webm .wma .wv".split(" ");for(const v of G)H.e8b.add(v)}return H.e8b}static aZh(G){return H.MGh().contains(G)}static T2h(G){G=w.Frh(G);return""!==document.createElement("audio").canPlayType(G)}}H.e8b=null;(0,z.a)(H,"EmbeddedFileReaderUtils",null,[])},17985:function(z,O,d){d.d(O,{a:function(){return h}});

Source: classification engine

Classification label: mal52.phis.win@19/70@22/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2344,i,15669229168429719209,4895585725098136349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://vestliaresort-my.sharepoint.com/:o:/g/personal/ziga_vestlia_no/Eky579E0q2lOhPOUshOGsHcBMaZdCfwRcrEzHT2ZmUZxNA?e=ksWeaa"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2344,i,15669229168429719209,4895585725098136349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: this.pa.register(Od,"Common.App.DelayedPackageRegistration").la().na(()=>new Od(this.H_g()))}H_g(){return new na.a}Fic(){}}(0,Fb.a)(uo,"AppComponentConfiguration",null,[2]);var Br=d(42445);class Xi{constructor(C){this.Ole=C}get zdi(){return 19922944}get v8i(){return!1}get u0f(){return!0}yYg(C,W){W&&(C&&0<C.length?this.Ole.create().wkj(C,W):W(null))}}(0,Fb.a)(Xi,"ProcessImageStrategy",null,[158]);class nf{vn(C){return Le.ImageReader.vn(C)}fF(C){return Le.ImageReader.fF(C)}mJ(C){return Le.ImageReader.mJ(C)}nJ(C){return Le.ImageReader.nJ(C)}hL(C){return Le.ImageReader.hL(C)}pFa(C){return Le.ImageReader.pFa(C)}Qdb(C){return Le.ImageReader.Qdb(C)}Ndb(C){return Le.ImageReader.Ndb(C)}Odb(C){return Le.ImageReader.Odb(C)}Pdb(C){return Le.ImageReader.Pdb(C)}SKb(C){let W; source: chromecache_104.1.dr, chromecache_130.1.dr
Source:	Binary string: "")}static qFa(t){return t.ka(w.a.Dua,0)}static HHc(t){t.setValue(w.a.Dua,2)}static fF(t){return J.Sj.fF(t)}static nJ(t){return J.Sj.nJ(t)}static mJ(t){return J.Sj.mJ(t)}static hL(t){return J.Sj.hL(t)}static mka(t){return J.Sj.mka(t)}static lka(t){return J.Sj.lka(t)}static $uh(t){return t.ka(B.a.yL,!1)}static q9e(t){return t.ka(D.a.Fka,0)}static dwd(t){return t.ka(x.a.Fka,-1)}static pFa(t){return J.Sj.pFa(t)}static Vth(t){return t.ka(D.a.vhf,!1)}static $vd(t){return t.ka(D.a.Uhf,!1)}static Qdb(t){return J.Sj.Qdb(t)}static Ndb(t){return J.Sj.Ndb(t)}static Odb(t){return J.Sj.Odb(t)}static Pdb(t){return J.Sj.Pdb(t)}static SKb(t){let A; source: chromecache_104.1.dr, chromecache_130.1.dr
Source:	Binary string: 0),Math.max(k.ImageReader.Ndb(l),0),Math.max(k.ImageReader.Odb(l),0),Math.max(k.ImageReader.Pdb(l),0));return u}}h.ckc=1E5;(0,z.a)(h,"CanvasEdits",null,[])},25579:function(z,O,d){d.r(O);d.d(O,{ImageBlobObject:function(){return v}});z=d(96135);var k=d(6249),h=d(67262),l=d(24180),y=d(10173),u=d(67444),B=d(17804);O=d(25942);var w=d(85814),x=d(48535),D=d(17454),I=d(79968),K=d(69574),H=d(87763),G=d(60444);class v extends O.a{constructor(P,R){super(P);this.dBe=!0;this.properties=null;this.id=R;P.paragraph&& source: chromecache_104.1.dr, chromecache_130.1.dr
Source:	Binary string: V.Oa(I.a.FHa)?(V=V.getValue(I.a.FHa),ba+=V[2]+V[3]):V.Oa(K.a.xea)&&(V=V.getValue(K.a.xea),ba+=V[2]+V[3]);return ba}lka(V){return V.ka(D.a.iBi,-1)}hL(V){return V.ka(x.a.xH,this.Tfb(V)?this.lka(V):-1)}pFa(V){return-1!==V.ka(I.a.Fka,-1)?V.ka(I.a.Fka,-1):V.ka(K.a.Fka,0)}Qdb(V){return V.ka(K.a.zBd,0)}Ndb(V){return V.ka(K.a.wBd,0)}Odb(V){return V.ka(K.a.xBd,0)}Pdb(V){return V.ka(K.a.yBd,0)}SKb(V){const ba=this.nJ(V),ca=this.hL(V);return{width:1E5*ba/(1E5-(Math.max(this.Odb(V),0)+Math.max(this.Pdb(V),0))), source: chromecache_104.1.dr, chromecache_130.1.dr

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_127.1.dr, chromecache_137.1.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_127.1.dr, chromecache_137.1.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://fb.me/use-check-prop-types	0%	URL Reputation	safe
https://reactjs.org/link/react-polyfills	0%	URL Reputation	safe
https://feross.org	0%	URL Reputation	safe
https://feross.org/opensource	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
wac-0003.wac-msedge.net	52.108.8.12	true	false	unknown
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
qafshah.com.sa	66.29.147.206	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
onenoteonline.nel.measure.office.net	unknown	unknown	false	unknown
vestliaresort-my.sharepoint.com	unknown	unknown	false	unknown
common.online.office.com	unknown	unknown	false	unknown
euc-common.online.office.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://vestliaresort-my.sharepoint.com/:o:/g/personal/ziga_vestlia_no/Eky579E0q2lOhPOUshOGsHcBMaZdCfwRcrEzHT2ZmUZxNA?e=ksWeaa	false	unknown
https://qafshah.com.sa/app/login/	true	unknown
https://euc-common.online.office.com/suite/RemoteUls.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&officeserverversion=	false	unknown
https://qafshah.com.sa/app/login/#	true	unknown
https://qafshah.com.sa/app/login/favicon.ico	true	unknown
https://vestliaresort-my.sharepoint.com/:o:/g/personal/ziga_vestlia_no/Eky579E0q2lOhPOUshOGsHcBMaZdCfwRcrEzHT2ZmUZxNA?rtime=tNiSGIPk3Eg	false	unknown
https://common.online.office.com/suite/RemoteUls.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&officeserverversion=	false	unknown
https://common.online.office.com/suite/RemoteTelemetry.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88	false	unknown
https://euc-common.online.office.com/suite/RemoteTelemetry.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://roaming.officeapps.partner.office365.cn/rs/v1/settings	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://whiteboard.apps.mil	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://cdn.fluidpreview.office.net/fluid/prod	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://my.microsoftpersonalcontent.com	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://cdn.dev.fluidpreview.office.net/fluid/dev	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://cdn.fluidpreview.office.net	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://whiteboard.office365.us	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://roaming.osi.office.de/rs/v1/settings	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://whiteboard.microsoft.scloud	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
http://fb.me/use-check-prop-types	chromecache_100.1.dr, chromecache_122.1.dr	false	URL Reputation: safe	unknown
https://1drv.ms	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://attributes.engagement.officeppe.com	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://whiteboard.eaglex.ic.gov	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://roaming.osi.office365.us/rs/v1/settings	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://reactjs.org/link/react-polyfills	chromecache_122.1.dr	false	URL Reputation: safe	unknown
https://feross.org	chromecache_104.1.dr, chromecache_130.1.dr	false	URL Reputation: safe	unknown
https://feross.org/opensource	chromecache_104.1.dr, chromecache_130.1.dr	false	URL Reputation: safe	unknown
https://roaming.osi.apps.mil/rs/v1/settings	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://fa000000096.resources.office.net	chromecache_130.1.dr	false		unknown
https://cdn.dev.fluidpreview.office.net	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://cdn.fluidpreview.office.net/fluid/gcc	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://cdn.fluidpreview.office.net/fluid/df	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://whiteboard.office.com/root/index.fluid.js	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://attributes.engagement.office.com	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://cdn.dev.fluidpreview.office.net/fluid/stg	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2401.26003/en-us_w	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://support.office.com/article/7afcb4f3-4aa2-443a-9b08-125a5d692576	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://attributes.engagement.office-int.com	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown
https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2210.23001/en-us_w	chromecache_130.1.dr	false		unknown
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	chromecache_104.1.dr, chromecache_130.1.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
66.29.147.206	qafshah.com.sa	United States	19538	ADVANTAGECOMUS	false
52.108.8.12	wac-0003.wac-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.108.9.12	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526017
Start date and time:	2024-10-04 16:43:42 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://vestliaresort-my.sharepoint.com/:o:/g/personal/ziga_vestlia_no/Eky579E0q2lOhPOUshOGsHcBMaZdCfwRcrEzHT2ZmUZxNA?e=ksWeaa
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@19/70@22/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://qafshah.com.sa/app/login/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.206, 74.125.206.84, 172.217.18.3, 34.104.35.123, 2.23.209.14, 2.23.209.53, 2.23.209.42, 2.23.209.46, 2.23.209.11, 2.23.209.5, 2.23.209.54, 2.23.209.33, 2.23.209.49, 2.23.209.10, 2.23.209.36, 2.23.209.59, 2.23.209.25, 104.102.55.235, 20.42.73.25, 2.19.126.146, 2.19.126.143, 20.42.72.131, 4.245.163.56, 93.184.221.240, 192.229.221.95, 52.165.164.15, 13.95.31.18, 142.250.185.170, 142.250.185.74, 172.217.16.138, 142.250.181.234, 142.250.185.138, 142.250.185.234, 216.58.212.138, 142.250.185.106, 172.217.23.106, 216.58.206.42, 142.250.184.202, 142.250.186.42, 142.250.185.202, 142.250.184.234, 216.58.212.170, 142.250.186.170, 142.250.74.195, 2.20.245.134, 2.20.245.140, 142.250.185.142
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c1-wildcard.cdn.office.net-c.edgekey.net.globalredir.akadns.net, e40491.dscd.akamaiedge.net, clientservices.googleapis.com, res-1.cdn.office.net, browser.events.data.trafficmanager.net, a1894.dscb.akamai.net, common-geo.wac.trafficmanager.net, wu.azureedge.net, c1-onenote-15.cdn.office.net, clients2.google.com, 190101-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, onedscolprdeus06.eastus.cloudapp.azure.com, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, euc-common-geo.wac.trafficmanager.net, update.googleapis.com, wu-b-net.trafficmanager.net, res-1.cdn.office.net-c.edgekey.net.globalredir.akadns.net, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://vestliaresort-my.sharepoint.com/:o:/g/personal/ziga_vestlia_no/Eky579E0q2lOhPOUshOGsHcBMaZdCfwRcrEzHT2ZmUZxNA?e=ksWeaa

Input	Output
URL: https://qafshah.com.sa/app/login/ Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Sign in", "prominent_button_name":"Next", "text_input_field_labels":["Email", "phone", "Skype"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://qafshah.com.sa/app/login/ Model: jbxai	{ "phishing_score":9, "brands":"Microsoft", "legit_domain":"microsoft.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is a well-known global technology company.", "The legitimate domain for Microsoft is 'microsoft.com'.", "The provided URL 'qafshah.com.sa' does not match the legitimate domain for Microsoft.", "The URL 'qafshah.com.sa' does not contain any recognizable association with Microsoft.", "The domain 'qafshah.com.sa' appears to be unrelated to Microsoft and could be a potential phishing attempt.", "The presence of an email input field suggests the site may be attempting to collect sensitive information under the guise of Microsoft."], "brand_matches":[false], "url_match":true, "brand_input":"Microsoft", "input_fields":"Email"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 13:44:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9747545682063605
Encrypted:	false
SSDEEP:	48:8qdscTMAj5HXidAKZdA19ehwiZUklqehEJy+3:8iTT/y
MD5:	8E42E8BF07DE9FD0FAACAB6171F32BEB
SHA1:	1E0825776AE4D20A886967388B5B71D2BA2CC3B0
SHA-256:	C41C727E397BC0EFA546A29575EF75DDE0FE3A7900F9890030996E803E29082E
SHA-512:	B95965BBAE26308E4787201D8024B01707A91C2CCCC58997E9BA96078A594C83E07DDD06755AE8D96C005889117ED62337B7C336942EA4FB16EF09140882DB62
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....4...k...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.u....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............L......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 13:44:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.989036088551609
Encrypted:	false
SSDEEP:	48:85dscTMAj5HXidAKZdA1weh/iZUkAQkqeh1Jy+2:8nTh9QKy
MD5:	F9E0748FA3484BEFBA177193533E64D9
SHA1:	951ECA25713B16D96243FEFD88C690AF93F5FFD9
SHA-256:	05C19C73AAEBC56896E3AC49DE8CEA684AD29CB193FB0BBDF7D52307FF208CD1
SHA-512:	E5478CEBF3DA5AEE9D60AF90FB3AE965AFB8AC18456BB68F8F97846AD3EA7E764398C5A3828002787A22F9D918682891C3E54C125D7573C85798666C2DEA59A3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....G...k...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.u....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............L......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.002841702457417
Encrypted:	false
SSDEEP:	48:8xMdscTMAjsHXidAKZdA14tseh7sFiZUkmgqeh7s/Jy+BX:8x8TanDy
MD5:	FED3D9AF6EE83169818E9AF1F3624649
SHA1:	4042EAF388F602BC0EC88AA92E06F0FB2F89ACC0
SHA-256:	C9505265F3D6DE88B40027B8CF7C1C63C4BC985935979F2EF55BF35E5B837225
SHA-512:	5C9CB55FB1D423865B664CDB0288681E5BF38383D71736768B87AB63A443EC3D7BAD6BB2CCCFC8E5D1AB76B9FAD800B1E735169FED3A41509D20EFE7A92722F1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.u....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............L......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 13:44:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.99053157356315
Encrypted:	false
SSDEEP:	48:86dscTMAj5HXidAKZdA1vehDiZUkwqeh5Jy+R:8STCZy
MD5:	52D17F2054B6B5F5B76BE41EB1A49BF6
SHA1:	AA5116CEFDE0604B32E0F82E574FD6A6DA35406F
SHA-256:	23ECBD2600F4251A60624D1E7850779D1FF8CD701E1EDB0E708C93A0EE4F5D91
SHA-512:	719D17559136E8762E94A66ACEF26135BAF3CC88FC7932502AABA9F440B2D052009AAE52BACFC26F427AAF53119C6A0DF3678458CAA3DB651DD0FC56A1C1B675
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........k...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.u....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............L......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 13:44:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9800571687803386
Encrypted:	false
SSDEEP:	48:8SdscTMAj5HXidAKZdA1hehBiZUk1W1qehbJy+C:8KTy91y
MD5:	3B060FF38300E78D0D91D32130063239
SHA1:	1AA75DB19E380F96A1B55662B2A29E2ABBBF4E30
SHA-256:	22245603E577834145E59090EC66DDE321A86F566F29512B8F0551CFAA4B5DE3
SHA-512:	06CF13DE3D3C4C556DD73F53EFEE8314BAA46C2D4CDFD86AB6E6FBE41F4050AA025DE2C66DFC912A777CAD78C906B88E5419E6E6EF4C84D33D9C7BBB133692CE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Kv..k...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.u....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............L......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 13:44:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.988090641026673
Encrypted:	false
SSDEEP:	48:8XBdscTMAj5HXidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbhJy+yT+:8/TsT/TbxWOvTbDy7T
MD5:	16E5A31A8DA2E8E290CF8E2CC01BC360
SHA1:	02D9AD4ED54280F2A0FD0166CC137DEA94C57386
SHA-256:	E9F1E4765A447E79126DB2A2F1E6EAF79926CD43CB6F788B7056D17BC12E2328
SHA-512:	5C9F7A935E85E3470549A3C25AB13E697B605CDD72E927061E402B4B0CC6CCE10814CFCF1B03315FB8DB6C2955340CC059B01FC458141B7B68244C23CDC33DCD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........k...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.u....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............L......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63602)
Category:	downloaded
Size (bytes):	130562
Entropy (8bit):	5.272399177246052
Encrypted:	false
SSDEEP:	1536:Wh8VvaIdNDxIQxI4QAQuBqCELdzQBy0uR6OndkP:Wh8VyIWLdcov4Ondw
MD5:	527D38A8499757692216AD44E57423CD
SHA1:	7E8A57695B633543E207A11410FD0464A8939DDE
SHA-256:	F2016FB6CCF9FB18D7C0828564415E3B47FAFD7845EED4E8F12404CBFD443802
SHA-512:	FBBA39F21C300AA578742367E5A8DFDB89CEFA3948F081EA0D48101C7B8AE951FD2C4894236A54D00B40511386F66080AC73EBE60FE5AEDFBFB98868F75684A7
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/sp-client/odsp.react/odsp.react.lib-361c9c69.js
Preview:	/! For license information please see odsp.react.lib-361c9c69.js.LICENSE.txt /.(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["odsp.react.lib"],{react_312:function(e){"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;function i(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map(function(e){return t[e]}).join(""))return!1;var a={};return"abcdefghijklmnopqrst".split("").forEach(function(e){a[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},a)).join("")}catch(e){return!1}}()?Object.assign:function(e,r){for(var o,s,c=i(e),d=1;d<arguments.length;d++){for(var l in o=Object(arguments[d]))n.ca

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.675002721266739
Encrypted:	false
SSDEEP:	96:HOmS/+CtmE8mmmmm08mmmmmtf8mmmmmO8mmmmm+8mmmmmo8mmmmmo8mmmmmSC3on:AGHFk
MD5:	7A7A4890CAAA77025E1B33A6D6E474EE
SHA1:	DC735B99D9EF0C76B4A7AEAE8BAA4CBD9551BA77
SHA-256:	9E1DA5BF715135491519A188CAD977DB6CBA414071E2407B69D63221379D8802
SHA-512:	291692981A555857F95A3378B511E27B60154B95EA0BA0452B3A5536D9A63A16B00518066E4F4B60E6A73CBD2A7C46B99A18102EA5970989B9736E57A6474D30
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h9E1DA5BF71513549_resources/1033/FavIcon_OneNote.ico
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................P...P...P...P...P...P...P...P...T...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................H...H...H...H...H...H...H...H...H...\...d...d...d...d...d...d...d....w...w...w...w...w...w...w...........

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.675002721266739
Encrypted:	false
SSDEEP:	96:HOmS/+CtmE8mmmmm08mmmmmtf8mmmmmO8mmmmm+8mmmmmo8mmmmmo8mmmmmSC3on:AGHFk
MD5:	7A7A4890CAAA77025E1B33A6D6E474EE
SHA1:	DC735B99D9EF0C76B4A7AEAE8BAA4CBD9551BA77
SHA-256:	9E1DA5BF715135491519A188CAD977DB6CBA414071E2407B69D63221379D8802
SHA-512:	291692981A555857F95A3378B511E27B60154B95EA0BA0452B3A5536D9A63A16B00518066E4F4B60E6A73CBD2A7C46B99A18102EA5970989B9736E57A6474D30
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................P...P...P...P...P...P...P...P...T...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................H...H...H...H...H...H...H...H...H...\...d...d...d...d...d...d...d....w...w...w...w...w...w...w...........

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057604
Encrypted:	false
SSDEEP:	3:qinPkks:qyPBs
MD5:	38877D38FB5DCDEFE823D08DF5B138D8
SHA1:	6B83BF1B4F595F9FCC0F0C9CD48B8A4150DFFDEC
SHA-256:	13CD0FA30D1AE06D7CFA7637FCE027EA93508032355034BBDEE631B31AF0F4DF
SHA-512:	C58843361F11CDD4335D6269F6E32F9795ABD9E98686CC2FB4A93419A97632990D1C5D89E11B21AFE89BB938B3D1B135AA8F10F76DEC112A2C9D6801CC35D260
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmtp6dXJt6crhIFDYOoWz0SBQ1Xevf9?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw1Xevf9GgA=

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (634)
Category:	dropped
Size (bytes):	4043188
Entropy (8bit):	5.658562949622606
Encrypted:	false
SSDEEP:	49152:1ikoH+MBnhx4+HvObv/fBBaEpWZ0O92Hdc1rJKewHm2mVIQJWJp18LccaX7goHVB:CiuAA/WAe
MD5:	7C20E027605F8F89EEDD2BB26D5F5198
SHA1:	1487850069F0A851A74431707218AD9FF71B823D
SHA-256:	E591FACFDFBA987EA576AAB90AF2654B38A9FE2321C2F1125DBCAA02E99C952C
SHA-512:	13774C822326F866D9752616E822B8B25187297BE54F0C7D62E7EDB25B5DA17AC1FE019A2354D3CDD4AAB1DE31F26DE385E71AEB78D29E5B030D9043C8D6C982
Malicious:	false
Reputation:	low
Preview:	/. Microsoft Corporation. All rights reserved.. The buffer module from node.js, for the browser... @author Feross Aboukhadijeh <https://feross.org>. @license MIT. ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> Copyright (c) Microsoft Corporation and contributors. All rights reserved.. Licensed under the MIT License../.'use strict';function ne(ya){var Ta=0;return function(){return Ta<ya.length?{done:!1,value:ya[Ta++]}:{done:!0}}}var aH="function"==typeof Object.defineProperties?Object.defineProperty:function(ya,Ta,N){if(ya==Array.prototype\|\|ya==Object.prototype)return ya;ya[Ta]=N.value;return ya};.function tH(ya){ya=["object"==typeof globalThis&&globalThis,ya,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var Ta=0;Ta<ya.length;++Ta){var N=ya[Ta];if(N&&N.Math==Math)return N}throw Error("Cannot find global object");}var uH=tH(this);.function xH(ya,Ta){if(Ta)a:{var N=uH;ya=ya.split(".");for(var Da=0

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	downloaded
Size (bytes):	141219
Entropy (8bit):	5.330502875132488
Encrypted:	false
SSDEEP:	1536:6rekafzVM8v4ZvE3DUJ/N0SoY+2d2j6Cha18suGEYE4yH/OqyOPGkB6ORJDJ:6ekl8v4ZvEQUSov2dqha1JefOzgRJt
MD5:	403C9E15ABC6E04677EE49B1F44F6083
SHA1:	1C2ECE54EC310A63B9437DB2B28FFB661B4EE12C
SHA-256:	CA2ABA12887DBD9FFBD17848EFC960CC070FFFFFF9DA87263CDE47BDD3D3B830
SHA-512:	7037868B5132B66EF78DF370E850A7BF87FCD6962FDD16AC47751D0D95395F5B16B70EC90C39D294A69146B67EDD00873BC32F9828E8087E9940C83E31F29D16
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/sp-client/odsp.1ds/odsp.1ds.lib-67f10919.js
Preview:	/! For license information please see odsp.1ds.lib-67f10919.js.LICENSE.txt /."use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["odsp.1ds.lib"],{"1ds-lib":function(e,t,n){n.r(t),n.d(t,{_InMemoryPropertyStorage:function(){return Ls},_OneDSLogger:function(){return As}});var a={};n.r(a),n.d(a,{optionalDiagnostic:function(){return fs},requiredDiagnostic:function(){return us},requiredService:function(){return ps}});var i=function(e,t){return i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},i(e,t)};function r(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}i(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var o=function(){return o=Object.assign\|\|function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var i i

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	143863
Entropy (8bit):	5.36938802349623
Encrypted:	false
SSDEEP:	3072:daSqlAl7UrY+rRC4e6SNmGli0uuK1oHUwy98hlT31u9v1rsVS:dadlAAbC4wAa3hryvD
MD5:	9A58505A922576BB82526512AD059CD1
SHA1:	D328E153D8D8D022739565009854AD86E807F24D
SHA-256:	55625B26867102ED2CB49BBFE1C05D31904AAB0727A6454D468600DB402D277B
SHA-512:	381BCDC5FEF74D2213FE935BDFFB2418F0D098F75F795804CAD9D0892C611F2389E86405FE469492D8332584A6A927CE6AC554A46D64F8E235FBDC423799BB71
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/wise/owl/onenote-boot.48eae77d8ecc6a76694a.js
Preview:	var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(t){var e={};function i(s){if(e[s])return e[s].exports;var o=e[s]={i:s,l:!1,exports:{}};return t[s].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=t,i.c=e,i.d=function(t,e,s){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:s})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var s=Object.create(null);if(i.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)i.d(s,o,function(e){return t[e]}.bind(null,o));return s},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return Object.prototype.hasOwnPro

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3735
Entropy (8bit):	4.393532156758813
Encrypted:	false
SSDEEP:	96:zh/fGQ6ScPHMBDh3g7uECJYUymTmhI4n3odG39VoN:F/+Q6pHMhQw6ATw7VC
MD5:	6B7BCC959CEF21FCE3F01590385E079A
SHA1:	A09C37C73DE6432238AB22016DDEB3E0657A16BE
SHA-256:	6D9C647A916A5A7DA979FABE27AB6D6D6A492415F96D1FF8F3730A3E96F52821
SHA-512:	5179C0A042B974FE6ED7384D42E873BE814CE509747D0C9708368C9FDA1BF8AEC2B114301789285275E09F8C69905B27B918AB296927CA7F9E0F139628442968
Malicious:	false
Reputation:	low
Preview:	{"timestamp":1728053122839,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"EnableWordSessionRefreshLoggingCleanup":false,"BootstrapperSettingsFetchPeriod":60000,"BootstrapperUlsHeartbeatIntervalMs":5000,"BootstrapperMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"WordRefreshTelemetryExpirationInDays":7,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"03ED953A90AE1A5E8FFD1D650B1E74C0E54D7AFE","RemoteUlsSuppressions":"378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27024), with CRLF line terminators
Category:	downloaded
Size (bytes):	27026
Entropy (8bit):	5.536845977615562
Encrypted:	false
SSDEEP:	384:ne7LRwe03wCS8V012RwlKzXicngH8I4qIZD3338z3YSzK1/0:ne756VnzZbI6Dn8z3YWd
MD5:	A230E20FEECBB758D7C13303A657EEDD
SHA1:	F12606CCE8600D9DFB5316610EE5177BA51B0CE9
SHA-256:	816A0F42A2BF473213A47BE1DDE62215811D54AF1151A1E9916DC215DF6EC776
SHA-512:	1C6F7288BEBAB71D8B6C7CE21D5F1FAA53C6710FAF1A0F611C0313E71BD5DB17A304E433686836AB2EEAE0E0ACBDDEAA2E1E82EDE54145520542C0361066FEE0
Malicious:	false
Reputation:	low
URL:	https://c1-onenote-15.cdn.office.net/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css
Preview:	FocusedContentControl{margin:0;padding:0;}.EditingSurfaceBody{background-color:transparent;border:none;outline:none;}.EditingSurfaceBody,.EditingSurfaceBody {-ms-touch-select:none;-webkit-user-select:text;-khtml-user-select:text;-moz-user-select:text;-ms-user-select:text;}.EditMode span.SpellingError,.EditingSurfaceBody span.SpellingError{background-image:url('data:image/gif;base64,R0lGODlhBQAEAJECAP////8AAAAAAAAAACH5BAEAAAIALAAAAAAFAAQAAAIIlGAXCCHrTCgAOw==');border-bottom:solid 1px transparent;}.EditMode span.DictationCorrection,.EditingSurfaceBody span.DictationCorrection{background-image:url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' width='3' height='4'><path d='M 0 0 L 5 5' stroke='gray' stroke-width='1px'/></svg>");border-bottom:solid 1px transparent;}.EditMode span.ContextualSpellingAndGrammarError,.EditingSurfaceBody span.ContextualSpellingAndGrammarError{background-image:url('data:image/gif;base64,R0lGODlhBQAEAPEDAABVzDNVzDNV/wAAACH5BAUAAAMALAAAAAAFAAQ

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1208
Entropy (8bit):	5.4647615085670616
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqFOa7JZRGNeHX+AYcvP2wk1USdYF9Yk5:lmIAq1UqFOiJZ+eHX+AdP2wyYFOk5
MD5:	D29FA9F2AB3A72F2608E8E82C8C3D1C6
SHA1:	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F
SHA-256:	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
SHA-512:	824A207E3F5AF4934B7B50FE5E3F8585FAECA571C3C39E510C06DC8FBDF3E64B07811CAAE06239936BDDDDFA4C90E534F03C0DA8147AF9294042DEA6B0FBCB94
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>500 - Internal server error.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	177984
Entropy (8bit):	5.52610796173251
Encrypted:	false
SSDEEP:	3072:SFAR5AMN0wVGbzb/zFpW6uYyXaPdMUbHp3Y3WCOgomKbueSiPRu/8vjNaTL:JjfN0ISzDzFpW6sqPdMUbHVgomKbVaP
MD5:	8CF8DAE091B66D8AD817CBA1C5578881
SHA1:	A1401E19EFAF4A16172DDFD256492664AF3F9939
SHA-256:	3CB6080AC6BF1CB93020F7154D475B300C784EBC3385FDCEE0838B590670DF91
SHA-512:	F0D559C7BF9519B27CDAD9B4BFF725F8706490B0FF9A329ED35EFA633EF42AACA8367C18D3722651B84B2CC135C82E0F62614A925886594565899F43C4BACF00
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/wise/owl/owl.slim.29c9352f088f35baee16.js
Preview:	var Microsoft;!function(){"use strict";var t,e,n,o,i={32812:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(13260),i=n(40426),r=n(19665),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.hasCompleted=!1,e}return o.C6(e,t),e.prototype.U=function(e){return this.hasError?(e.error(this.thrownError),r.y.EMPTY):this.hasCompleted&&this.hasNext?(e.next(this.value),e.complete(),r.y.EMPTY):t.prototype.U.call(this,e)},e.prototype.next=function(t){this.hasCompleted\|\|(this.value=t,this.hasNext=!0)},e.prototype.error=function(e){this.hasCompleted\|\|t.prototype.error.call(this,e)},e.prototype.complete=function(){this.hasCompleted=!0,this.hasNext&&t.prototype.next.call(this,this.value),t.prototype.complete.call(this)},e}(i.B7)},39188:function(t,e,n){n.d(e,{t:function(){return s}});var o=n(13260),i=n(40426),r=n(92581),s=function(t){function e(e){var n=t.call(this)\|\|this;return n.N=e,n}return o.C6(e,t),Object.defineProperty(e.prototype,"va

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://qafshah.com.sa/app/login/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7232)
Category:	downloaded
Size (bytes):	7282
Entropy (8bit):	5.290686919366437
Encrypted:	false
SSDEEP:	192:yV0+ZmVlvPbxqibgDVAzi9hJtPk5OTR2M:yMlvPbxqibGVSi9hJRk4TRB
MD5:	809B7065691C9CAF826EFDB6627DEFA1
SHA1:	6F38331F52837B3B155CA20DB8B1EEDE3FFDEBA3
SHA-256:	59BFC2B4DF5B895D3CFDB8E32B2E8F9C1EED27EE4A95FB307CEB1579744D3518
SHA-512:	07FFBAEE9574495E85618FD8A7877F4E2B123AA8247CB7AD6B07E125B8846F0F32BE179CE2843FC7D1CBFC37ADD210CF9388D6DA620204F8B9A00C8E450FC4C5
Malicious:	false
Reputation:	low
URL:	https://c1-onenote-15.cdn.office.net/o/s/161800641011_App_Scripts/wp5/appResourceLoader.min.js
Preview:	var appResourceLoader;!function(){"use strict";var e,n,t,o,r={78307:function(e,n,t){t.r(n),t.d(n,{init:function(){return c.Ts},loadChunk:function(){return g},loadIntlBootResources:function(){return a}});var o=t(11593);let r,i=!1;function a(e){const n="onenote-ribbon-intl.min.js";return i\|\|(r=(0,o.loadScript)(n,e.scriptBaseUrl.concat(n),void 0,5),i=!0),r}var c=t(21936);const u="appChrome",s="canvasAtMentions",l="loopLoadingManager",d="navigation",f="onenote-navpane-strings",p="onenote-ribbon-intl",h="onenote-whatsnew-strings",m="sharedComments",b="comment-pane-strings",v={[u]:{dependencies:[p]},[l]:{},[m]:{dependencies:[b]},[s]:{dependencies:[b]},[d]:{dependencies:[f,h]},[p]:{isLocalized:!0},"onenote-ribbon-sprite-lazy":{isLocalized:!0},"onenote-ribbon-intl-lazy":{isLocalized:!0},"onenote-intl-mlr-lazy":{isLocalized:!0},[f]:{isLocalized:!0},[h]:{isLocalized:!0},"onenote-ribbon-sprite":{isLocalized:!0},"onenote-mlr-sprite":{isLocalized:!0},"onenote-mlr-sprite-lazy":{isLocalized:!0},"tell

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	143863
Entropy (8bit):	5.36938802349623
Encrypted:	false
SSDEEP:	3072:daSqlAl7UrY+rRC4e6SNmGli0uuK1oHUwy98hlT31u9v1rsVS:dadlAAbC4wAa3hryvD
MD5:	9A58505A922576BB82526512AD059CD1
SHA1:	D328E153D8D8D022739565009854AD86E807F24D
SHA-256:	55625B26867102ED2CB49BBFE1C05D31904AAB0727A6454D468600DB402D277B
SHA-512:	381BCDC5FEF74D2213FE935BDFFB2418F0D098F75F795804CAD9D0892C611F2389E86405FE469492D8332584A6A927CE6AC554A46D64F8E235FBDC423799BB71
Malicious:	false
Reputation:	low
Preview:	var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(t){var e={};function i(s){if(e[s])return e[s].exports;var o=e[s]={i:s,l:!1,exports:{}};return t[s].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=t,i.c=e,i.d=function(t,e,s){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:s})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var s=Object.create(null);if(i.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)i.d(s,o,function(e){return t[e]}.bind(null,o));return s},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return Object.prototype.hasOwnPro

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14666), with no line terminators
Category:	downloaded
Size (bytes):	14666
Entropy (8bit):	5.192998441009612
Encrypted:	false
SSDEEP:	192:9dbIGOqZ05GyaKzhRCwqyf/q2E+Rh99TzlfVNyv83+LBoaWLNwGfiC8O5PPM:9BiUQhRVfye99Pl9483+LBoaWLqv
MD5:	8880E957219B056B26B67D88CB7FFFF5
SHA1:	BE024ABFE99C2DC447191E2C59DD96FD9352E2C4
SHA-256:	4BBB0DBB03A136E993BB2FB363455E7DCABF84CBB17DE37AD6168B9326E56909
SHA-512:	1E611B1C8D3B7DE4CEE215C989885A6F8256B89A51621B77598A9A363AAF2897FC439DD73860234BA77AB682B84D05437CE0DBBDA59C3C1B5CC9D16662897EC5
Malicious:	false
Reputation:	low
URL:	https://c1-onenote-15.cdn.office.net/o/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
Preview:	if("undefined"!=typeof jSanity)throw"jSanity has been defined, please check if there's any duplicate reference.";jSanity={},function(e){"use strict";var t={inputString:"",maxWidth:"600px",maxHeight:"200px",overflow:"hidden",allowLinks:!0,linkClickCallback:null,customProtocols:{},allowRelativeURLs:!1,allowAudioVideo:!1,unsupportedContentCallback:null,externalContentCallback:function(e,t,r,o){var i;if("attribute"===e&&"src"===t)for(var n in o)if(o.hasOwnProperty(n)&&r.substring(0,n.length)===n){i=!0;break}return i\|\|(r="CSSURL"===e?'url("about:blank")':"about:blank"),r},isolatedTargetDOM:!1,directModifySource:!0,attributePrefix:"jSanity",dataAttributeCallback:null,debugLevel:0,onFinishedCallback:null},r=function(){this.sync=!0,this.jobs=[],this.id=r.globalId++,this.listnerPosfix=0,this.onCompletedListners={},this.onNewJobAddedListners={},this.useSync=function(){this.sync=!0},this.useAsync=function(){this.sync=!1},this.addNewJob=function(e){for(var t in this.jobs.push(e),this.onNewJobAdded

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	78901
Entropy (8bit):	5.060554745865292
Encrypted:	false
SSDEEP:	768:+pCmHr0AOKTnbhCxm6MlP0zBSMuEn047nNXcb7GLLWZWxWG6sS6bxiw:+pCydxgxmX98NXcb7GLLCmWsSExn
MD5:	4123E54E74C586D7ED2BA278AE3B1D2B
SHA1:	EB26A45375D151E5636261ACBC8A3248F37609E2
SHA-256:	6DC7A98685446A0319E160B5D06A09C7C836ABDA48F85F60805EB5FDEDA2BD1F
SHA-512:	A5F7D51753D8BBDB88E023EF054E31E0932B8A4ADB2BDD2A5D68D38387A7B44A38EC97FF239A81735C2E590AFFBD0E6DBFA7B58DFC1F63882D79A1EFE7A20913
Malicious:	false
Reputation:	low
Preview:	Type.registerNamespace("Box4Intl");Box4Intl.Box4Strings=function(){};Box4Intl.Box4Strings.registerClass("Box4Intl.Box4Strings");Box4Intl.Box4Strings.l_OutlineResizeAlt="Resize the Outline";Box4Intl.Box4Strings.l_NavigationPaneContentsLabel="Notebook Contents";Box4Intl.Box4Strings.l_UntitledPageText="Untitled Page";Box4Intl.Box4Strings.l_UntitledSection="Untitled Section";Box4Intl.Box4Strings.l_NotebookPagesSection="General Pages";Box4Intl.Box4Strings.l_ProtoButtonText="New Page";Box4Intl.Box4Strings.l_SectionGroupAltText="Section Group";Box4Intl.Box4Strings.l_SectionGroupArrowAltText="Navigate Up";Box4Intl.Box4Strings.l_DefaultUserName="Unknown User";Box4Intl.Box4Strings.l_UserInitialsDelimeter="; ";Box4Intl.Box4Strings.l_PageLoadingText="Loading...";Box4Intl.Box4Strings.l_OreoSpinnerText="Loading Page...";Box4Intl.Box4Strings.l_ConflictPage="Conflict Page";Box4Intl.Box4Strings.l_PageAccessibilityContext="Page {0}";Box4Intl.Box4Strings.l_PageWithSearchResultsAccessibilityContext="Page

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30497), with no line terminators
Category:	dropped
Size (bytes):	30497
Entropy (8bit):	5.0064253326064065
Encrypted:	false
SSDEEP:	384:NpM3QZmZwe3CDLqHOGRvCEWMYdd9KaAQnzkY65dv:NpM3QZbLqHO4XYdd9KvQnzkY65dv
MD5:	E55F3C2F2F2F2A339E4B0A08030E9803
SHA1:	729D608C534829E07F5DCDBBD75BBC031A9E9D9A
SHA-256:	40CBE329851D4261E0E4A3B3665FD1025747AAC3CBFD87689CF3F2689CACF4E9
SHA-512:	CB67A880ECAA6F59844F6604BB98A7E27AB64F639AC79BA683C164A2A809BFAF1D3B224CC50138846B8646EF05409820AEE490BA83D637145E16A78E67CF4847
Malicious:	false
Reputation:	low
Preview:	Type.registerNamespace("WoncaIntl");WoncaIntl.WoncaStrings=function(){};WoncaIntl.WoncaStrings.registerClass("WoncaIntl.WoncaStrings");WoncaIntl.WoncaStrings.L_RibbonLabel="Ribbon";WoncaIntl.WoncaStrings.L_TabHome="Home";WoncaIntl.WoncaStrings.L_TabInsert="Insert";WoncaIntl.WoncaStrings.L_TabWordDesign="Design";WoncaIntl.WoncaStrings.L_TabReferences="References";WoncaIntl.WoncaStrings.L_TabMailings="Mailings";WoncaIntl.WoncaStrings.L_TabReview="Review";WoncaIntl.WoncaStrings.L_TabView="View";WoncaIntl.WoncaStrings.L_TabDeveloper="Developer";WoncaIntl.WoncaStrings.L_TabAddIns="Add-ins";WoncaIntl.WoncaStrings.L_TabTableTools="Table Tools";WoncaIntl.WoncaStrings.L_TabLayout="Layout";WoncaIntl.WoncaStrings.L_TabPictureTools="Picture Tools";WoncaIntl.WoncaStrings.L_TabFormatPicture="Format";WoncaIntl.WoncaStrings.L_TabDesign="Design";WoncaIntl.WoncaStrings.L_TabHelp="Help";WoncaIntl.WoncaStrings.L_GroupUndoRedo="Undo";WoncaIntl.WoncaStrings.L_GroupClipboard="Clipboard";WoncaIntl.WoncaString

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5949), with no line terminators
Category:	downloaded
Size (bytes):	5949
Entropy (8bit):	5.021760613857532
Encrypted:	false
SSDEEP:	96:Vq+J+ZRrxLuL7H9T4Mh+HsQ7qQYHq3l0e4QDhMWp:xJ+ZR07HNhhw7qQYHq3l0e4P8
MD5:	BBF6A2B6E77972F0718F99C86AE3FE92
SHA1:	806E8C002AE178B41819BEAFE123AE09202DF966
SHA-256:	78FF6158246E4FA25F994827F90ED69FEEF349AA57449CB404E35C3026BD4B8A
SHA-512:	4B4F58735190254E74ED9BAF547046642F622EE35414784A093356D28982A28A5D84E4CE71E476A88BC43583B6BB2D916B16A733D67D5B30E145DC2E4182BC8C
Malicious:	false
Reputation:	low
URL:	https://c1-onenote-15.cdn.office.net/o/s/h78FF6158246E4FA2_App_Scripts/CompatParentElementFix.js
Preview:	function __loadCompat(n){n.Debug=function(){};n.Debug._fail=function(n){throw new Error(n);};n.Debug.writeln=function(n){window.console&&window.console.debug(n)};n.__getNonTextNode=function(n){try{while(n&&n.nodeType!=1)n=n.parentNode}catch(t){n=null}return n}}function _loadSafariCompat(){Node.prototype.__defineGetter__("text",function(){return this.textContent});Node.prototype.__defineSetter__("text",function(n){this.textContent=n});Node.prototype.selectNodes=function(n){var t=this.ownerDocument;return selectNodes(t,n,this)};Node.prototype.selectSingleNode=function(n){var t=this.ownerDocument;return selectSingleNode(t,n,this)};Document.prototype.selectNodes=function(n){return selectNodes(this,n,this.documentElement)};Document.prototype.selectSingleNode=function(n){return selectSingleNode(this,n,this.documentElement)}}function _loadMozillaCompat(n){n.navigate=function(n){window.setTimeout('window.location = "'+n+'";',0)};var t=function(n,t){t._mozillaEventHandler=function(n){return win

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30497), with no line terminators
Category:	downloaded
Size (bytes):	30497
Entropy (8bit):	5.0064253326064065
Encrypted:	false
SSDEEP:	384:NpM3QZmZwe3CDLqHOGRvCEWMYdd9KaAQnzkY65dv:NpM3QZbLqHO4XYdd9KvQnzkY65dv
MD5:	E55F3C2F2F2F2A339E4B0A08030E9803
SHA1:	729D608C534829E07F5DCDBBD75BBC031A9E9D9A
SHA-256:	40CBE329851D4261E0E4A3B3665FD1025747AAC3CBFD87689CF3F2689CACF4E9
SHA-512:	CB67A880ECAA6F59844F6604BB98A7E27AB64F639AC79BA683C164A2A809BFAF1D3B224CC50138846B8646EF05409820AEE490BA83D637145E16A78E67CF4847
Malicious:	false
Reputation:	low
URL:	https://c1-onenote-15.cdn.office.net/o/s/h40CBE329851D4261_App_Scripts/1033/WoncaIntl.js
Preview:	Type.registerNamespace("WoncaIntl");WoncaIntl.WoncaStrings=function(){};WoncaIntl.WoncaStrings.registerClass("WoncaIntl.WoncaStrings");WoncaIntl.WoncaStrings.L_RibbonLabel="Ribbon";WoncaIntl.WoncaStrings.L_TabHome="Home";WoncaIntl.WoncaStrings.L_TabInsert="Insert";WoncaIntl.WoncaStrings.L_TabWordDesign="Design";WoncaIntl.WoncaStrings.L_TabReferences="References";WoncaIntl.WoncaStrings.L_TabMailings="Mailings";WoncaIntl.WoncaStrings.L_TabReview="Review";WoncaIntl.WoncaStrings.L_TabView="View";WoncaIntl.WoncaStrings.L_TabDeveloper="Developer";WoncaIntl.WoncaStrings.L_TabAddIns="Add-ins";WoncaIntl.WoncaStrings.L_TabTableTools="Table Tools";WoncaIntl.WoncaStrings.L_TabLayout="Layout";WoncaIntl.WoncaStrings.L_TabPictureTools="Picture Tools";WoncaIntl.WoncaStrings.L_TabFormatPicture="Format";WoncaIntl.WoncaStrings.L_TabDesign="Design";WoncaIntl.WoncaStrings.L_TabHelp="Help";WoncaIntl.WoncaStrings.L_GroupUndoRedo="Undo";WoncaIntl.WoncaStrings.L_GroupClipboard="Clipboard";WoncaIntl.WoncaString

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7232)
Category:	dropped
Size (bytes):	7282
Entropy (8bit):	5.290686919366437
Encrypted:	false
SSDEEP:	192:yV0+ZmVlvPbxqibgDVAzi9hJtPk5OTR2M:yMlvPbxqibGVSi9hJRk4TRB
MD5:	809B7065691C9CAF826EFDB6627DEFA1
SHA1:	6F38331F52837B3B155CA20DB8B1EEDE3FFDEBA3
SHA-256:	59BFC2B4DF5B895D3CFDB8E32B2E8F9C1EED27EE4A95FB307CEB1579744D3518
SHA-512:	07FFBAEE9574495E85618FD8A7877F4E2B123AA8247CB7AD6B07E125B8846F0F32BE179CE2843FC7D1CBFC37ADD210CF9388D6DA620204F8B9A00C8E450FC4C5
Malicious:	false
Reputation:	low
Preview:	var appResourceLoader;!function(){"use strict";var e,n,t,o,r={78307:function(e,n,t){t.r(n),t.d(n,{init:function(){return c.Ts},loadChunk:function(){return g},loadIntlBootResources:function(){return a}});var o=t(11593);let r,i=!1;function a(e){const n="onenote-ribbon-intl.min.js";return i\|\|(r=(0,o.loadScript)(n,e.scriptBaseUrl.concat(n),void 0,5),i=!0),r}var c=t(21936);const u="appChrome",s="canvasAtMentions",l="loopLoadingManager",d="navigation",f="onenote-navpane-strings",p="onenote-ribbon-intl",h="onenote-whatsnew-strings",m="sharedComments",b="comment-pane-strings",v={[u]:{dependencies:[p]},[l]:{},[m]:{dependencies:[b]},[s]:{dependencies:[b]},[d]:{dependencies:[f,h]},[p]:{isLocalized:!0},"onenote-ribbon-sprite-lazy":{isLocalized:!0},"onenote-ribbon-intl-lazy":{isLocalized:!0},"onenote-intl-mlr-lazy":{isLocalized:!0},[f]:{isLocalized:!0},[h]:{isLocalized:!0},"onenote-ribbon-sprite":{isLocalized:!0},"onenote-mlr-sprite":{isLocalized:!0},"onenote-mlr-sprite-lazy":{isLocalized:!0},"tell

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63602)
Category:	dropped
Size (bytes):	130562
Entropy (8bit):	5.272399177246052
Encrypted:	false
SSDEEP:	1536:Wh8VvaIdNDxIQxI4QAQuBqCELdzQBy0uR6OndkP:Wh8VyIWLdcov4Ondw
MD5:	527D38A8499757692216AD44E57423CD
SHA1:	7E8A57695B633543E207A11410FD0464A8939DDE
SHA-256:	F2016FB6CCF9FB18D7C0828564415E3B47FAFD7845EED4E8F12404CBFD443802
SHA-512:	FBBA39F21C300AA578742367E5A8DFDB89CEFA3948F081EA0D48101C7B8AE951FD2C4894236A54D00B40511386F66080AC73EBE60FE5AEDFBFB98868F75684A7
Malicious:	false
Reputation:	low
Preview:	/! For license information please see odsp.react.lib-361c9c69.js.LICENSE.txt /.(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["odsp.react.lib"],{react_312:function(e){"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;function i(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map(function(e){return t[e]}).join(""))return!1;var a={};return"abcdefghijklmnopqrst".split("").forEach(function(e){a[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},a)).join("")}catch(e){return!1}}()?Object.assign:function(e,r){for(var o,s,c=i(e),d=1;d<arguments.length;d++){for(var l in o=Object(arguments[d]))n.ca

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	177984
Entropy (8bit):	5.52610796173251
Encrypted:	false
SSDEEP:	3072:SFAR5AMN0wVGbzb/zFpW6uYyXaPdMUbHp3Y3WCOgomKbueSiPRu/8vjNaTL:JjfN0ISzDzFpW6sqPdMUbHVgomKbVaP
MD5:	8CF8DAE091B66D8AD817CBA1C5578881
SHA1:	A1401E19EFAF4A16172DDFD256492664AF3F9939
SHA-256:	3CB6080AC6BF1CB93020F7154D475B300C784EBC3385FDCEE0838B590670DF91
SHA-512:	F0D559C7BF9519B27CDAD9B4BFF725F8706490B0FF9A329ED35EFA633EF42AACA8367C18D3722651B84B2CC135C82E0F62614A925886594565899F43C4BACF00
Malicious:	false
Reputation:	low
Preview:	var Microsoft;!function(){"use strict";var t,e,n,o,i={32812:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(13260),i=n(40426),r=n(19665),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.hasCompleted=!1,e}return o.C6(e,t),e.prototype.U=function(e){return this.hasError?(e.error(this.thrownError),r.y.EMPTY):this.hasCompleted&&this.hasNext?(e.next(this.value),e.complete(),r.y.EMPTY):t.prototype.U.call(this,e)},e.prototype.next=function(t){this.hasCompleted\|\|(this.value=t,this.hasNext=!0)},e.prototype.error=function(e){this.hasCompleted\|\|t.prototype.error.call(this,e)},e.prototype.complete=function(){this.hasCompleted=!0,this.hasNext&&t.prototype.next.call(this,this.value),t.prototype.complete.call(this)},e}(i.B7)},39188:function(t,e,n){n.d(e,{t:function(){return s}});var o=n(13260),i=n(40426),r=n(92581),s=function(t){function e(e){var n=t.call(this)\|\|this;return n.N=e,n}return o.C6(e,t),Object.defineProperty(e.prototype,"va

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57514)
Category:	dropped
Size (bytes):	57557
Entropy (8bit):	5.310727901979522
Encrypted:	false
SSDEEP:	1536:s3nHejerioXnQH2g5utdVUZcS6lXfk0HuIx/YKiv8K:G3Ep5uLvSGkp2/Yf
MD5:	3A39F14418008A6894C5AB073F9FC015
SHA1:	A946DE008D832869DCD8C999EB5DCF784F52C15D
SHA-256:	6E8F840BAE5BC0A188C25853E1F0EB6B14CB720C243AD4DE5D56F2F2879609CE
SHA-512:	93330221863B07D51B5011F8713BAEE8CAA5054BAB4A90DAB324844CF63792ABBD28310486980DA58616EEE0C4809B9E9AF6B1051A3E18D206C9AD908A97CA70
Malicious:	false
Reputation:	low
Preview:	var wacBoot;!function(){"use strict";var e,t,i={},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={exports:{}};return i[e](o,o.exports,s),o.exports}s.m=i,s.d=function(e,t){for(var i in t)s.o(t,i)&&!s.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:t[i]})},s.f={},s.e=function(e){return Promise.all(Object.keys(s.f).reduce((function(t,i){return s.f[i](e,t),t}),[]))},s.u=function(e){return"pasLogger.min.js"},s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),s.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},e={},t="wacBoot:",s.l=function(i,n,o,a){if(e[i])e[i].push(n);else{var r,l;if(void 0!==o)for(var c=document.getElementsByTagName("script"),d=0;d<c.length;d++){var u=c[d];if(u.getAttribute("src")==i\|\|u.getAttribute("data-webpack")==t+o){r=u;break}}r\|\|(l=!0,(r=document.createElement("script")).charset="utf-8",r.timeout=120,s.nc&&r.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57514)
Category:	downloaded
Size (bytes):	57557
Entropy (8bit):	5.310727901979522
Encrypted:	false
SSDEEP:	1536:s3nHejerioXnQH2g5utdVUZcS6lXfk0HuIx/YKiv8K:G3Ep5uLvSGkp2/Yf
MD5:	3A39F14418008A6894C5AB073F9FC015
SHA1:	A946DE008D832869DCD8C999EB5DCF784F52C15D
SHA-256:	6E8F840BAE5BC0A188C25853E1F0EB6B14CB720C243AD4DE5D56F2F2879609CE
SHA-512:	93330221863B07D51B5011F8713BAEE8CAA5054BAB4A90DAB324844CF63792ABBD28310486980DA58616EEE0C4809B9E9AF6B1051A3E18D206C9AD908A97CA70
Malicious:	false
Reputation:	low
URL:	https://c1-onenote-15.cdn.office.net/o/s/h6E8F840BAE5BC0A1_App_Scripts/wp5/wacBootNew.min.js
Preview:	var wacBoot;!function(){"use strict";var e,t,i={},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={exports:{}};return i[e](o,o.exports,s),o.exports}s.m=i,s.d=function(e,t){for(var i in t)s.o(t,i)&&!s.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:t[i]})},s.f={},s.e=function(e){return Promise.all(Object.keys(s.f).reduce((function(t,i){return s.f[i](e,t),t}),[]))},s.u=function(e){return"pasLogger.min.js"},s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),s.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},e={},t="wacBoot:",s.l=function(i,n,o,a){if(e[i])e[i].push(n);else{var r,l;if(void 0!==o)for(var c=document.getElementsByTagName("script"),d=0;d<c.length;d++){var u=c[d];if(u.getAttribute("src")==i\|\|u.getAttribute("data-webpack")==t+o){r=u;break}}r\|\|(l=!0,(r=document.createElement("script")).charset="utf-8",r.timeout=120,s.nc&&r.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7444)
Category:	downloaded
Size (bytes):	465808
Entropy (8bit):	5.497090758706446
Encrypted:	false
SSDEEP:	6144:itt8eqIuTYT2T2CzUN2GpcklGFHTCH13EHvL5djPjwc5PQwRKhPPVET:iz8eqI5AGpcyGFH1vnXKwT
MD5:	551EA8680A3C80C8C6D920A734AA0034
SHA1:	BC1C3CC4D1A034A26440C742424C17E93B82E74B
SHA-256:	75DA19B882200D935F80C4CDE462FE63B17BBD1E4B6329FD510C7AA364E31FE9
SHA-512:	FDCA3292240C7922E7E6F30A99257023BFB6598327B76D3B039C929348B75F5303E27C336B0135446D13F39505F41F63E566D6E13E0810BE0B2E0E23A737AD88
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-09-20.007/wacowlhostwebpack/wacowlhostwebpack.js
Preview:	/! For license information please see wacowlhostwebpack.js.LICENSE.txt /.(()=>{var e=document.currentScript;define("odsp-next/roots/WacOwlHost",["odsp.react.lib"],()=>{var t;return(()=>{"use strict";var n=[(e,t,n)=>{n.r(t),n.d(t,{__assign:()=>r,__asyncDelegator:()=>S,__asyncGenerator:()=>y,__asyncValues:()=>D,__await:()=>v,__awaiter:()=>l,__classPrivateFieldGet:()=>w,__classPrivateFieldSet:()=>E,__createBinding:()=>f,__decorate:()=>s,__exportStar:()=>p,__extends:()=>i,__generator:()=>u,__importDefault:()=>O,__importStar:()=>C,__makeTemplateObject:()=>I,__metadata:()=>d,__param:()=>c,__read:()=>_,__rest:()=>o,__spread:()=>h,__spreadArray:()=>g,__spreadArrays:()=>b,__values:()=>m});var a=function(e,t){return a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},a(e,t)};function i(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29173), with no line terminators
Category:	downloaded
Size (bytes):	29173
Entropy (8bit):	5.201883067368051
Encrypted:	false
SSDEEP:	768:Buh4zsotX8wWwnEDbdnkAKBg3HnzJ9Non/e+hjOF:Bo2BT2Dl3TJ9NonW
MD5:	F6228139447C795F72C09114F8289A8C
SHA1:	0D0499DC74723111C0B78792B40BF5B8D04A2FB2
SHA-256:	E6108C2F14C08CE48EB243728C24011A8E70E60DCA21BFA51FFFC6B1B8A999C7
SHA-512:	F3087F1B24B65AA4F2007B168A8F5A1D0ACFA8BB6677FF156CE6A4B4A76234820B390F2DC444DE2EEFC4F58FB35BF3E1F866481A92383C914D20BBD44EDBC0A2
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-09-20.007/require-f6228139.js
Preview:	!(function(){if("PerformanceLongTaskTiming"in window){var e=window.__tti={e:[]};e.o=new PerformanceObserver((function(t){e.e=e.e.concat(t.getEntries())}));e.o.observe({entryTypes:["longtask"]})}})();!(function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports["es6-symbol"]=t():(e["es6-symbol"]=t(),e.Symbol=e.Symbol\|\|e["es6-symbol"])})(window,(function(){return(function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	4043188
Entropy (8bit):	5.658562949622606
Encrypted:	false
SSDEEP:	49152:1ikoH+MBnhx4+HvObv/fBBaEpWZ0O92Hdc1rJKewHm2mVIQJWJp18LccaX7goHVB:CiuAA/WAe
MD5:	7C20E027605F8F89EEDD2BB26D5F5198
SHA1:	1487850069F0A851A74431707218AD9FF71B823D
SHA-256:	E591FACFDFBA987EA576AAB90AF2654B38A9FE2321C2F1125DBCAA02E99C952C
SHA-512:	13774C822326F866D9752616E822B8B25187297BE54F0C7D62E7EDB25B5DA17AC1FE019A2354D3CDD4AAB1DE31F26DE385E71AEB78D29E5B030D9043C8D6C982
Malicious:	false
Reputation:	low
URL:	https://c1-onenote-15.cdn.office.net/o/s/hE591FACFDFBA987E_App_Scripts/OneNoteDS.js
Preview:	/. Microsoft Corporation. All rights reserved.. The buffer module from node.js, for the browser... @author Feross Aboukhadijeh <https://feross.org>. @license MIT. ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> Copyright (c) Microsoft Corporation and contributors. All rights reserved.. Licensed under the MIT License../.'use strict';function ne(ya){var Ta=0;return function(){return Ta<ya.length?{done:!1,value:ya[Ta++]}:{done:!0}}}var aH="function"==typeof Object.defineProperties?Object.defineProperty:function(ya,Ta,N){if(ya==Array.prototype\|\|ya==Object.prototype)return ya;ya[Ta]=N.value;return ya};.function tH(ya){ya=["object"==typeof globalThis&&globalThis,ya,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var Ta=0;Ta<ya.length;++Ta){var N=ya[Ta];if(N&&N.Math==Math)return N}throw Error("Cannot find global object");}var uH=tH(this);.function xH(ya,Ta){if(Ta)a:{var N=uH;ya=ya.split(".");for(var Da=0

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.708048150071232
Encrypted:	false
SSDEEP:	3:HyjJTzMKHJu:HyjNz5pu
MD5:	435B48C70ACA2DC80F8B34B5FDEB2789
SHA1:	FFE2C8567607568F939FA1A6F9888639B98B400C
SHA-256:	6468AC9F9BCA964F3910FC967B80781C1C8634300E36F95AE49056D91A2734BF
SHA-512:	5C73531F908067B986F4F7F1BB423DC6FC4B1CDC9A6C65205658BD2A2499CB53F0F1C4EB928B8B87B189D969C3769F9D97EA5AB1CEA97FE6F18D2DD4AD583C60
Malicious:	false
Reputation:	low
Preview:	The service is unavailable.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78901
Entropy (8bit):	5.060554745865292
Encrypted:	false
SSDEEP:	768:+pCmHr0AOKTnbhCxm6MlP0zBSMuEn047nNXcb7GLLWZWxWG6sS6bxiw:+pCydxgxmX98NXcb7GLLCmWsSExn
MD5:	4123E54E74C586D7ED2BA278AE3B1D2B
SHA1:	EB26A45375D151E5636261ACBC8A3248F37609E2
SHA-256:	6DC7A98685446A0319E160B5D06A09C7C836ABDA48F85F60805EB5FDEDA2BD1F
SHA-512:	A5F7D51753D8BBDB88E023EF054E31E0932B8A4ADB2BDD2A5D68D38387A7B44A38EC97FF239A81735C2E590AFFBD0E6DBFA7B58DFC1F63882D79A1EFE7A20913
Malicious:	false
Reputation:	low
URL:	https://c1-onenote-15.cdn.office.net/o/s/h6DC7A98685446A03_App_Scripts/1033/Box4Intl.js
Preview:	Type.registerNamespace("Box4Intl");Box4Intl.Box4Strings=function(){};Box4Intl.Box4Strings.registerClass("Box4Intl.Box4Strings");Box4Intl.Box4Strings.l_OutlineResizeAlt="Resize the Outline";Box4Intl.Box4Strings.l_NavigationPaneContentsLabel="Notebook Contents";Box4Intl.Box4Strings.l_UntitledPageText="Untitled Page";Box4Intl.Box4Strings.l_UntitledSection="Untitled Section";Box4Intl.Box4Strings.l_NotebookPagesSection="General Pages";Box4Intl.Box4Strings.l_ProtoButtonText="New Page";Box4Intl.Box4Strings.l_SectionGroupAltText="Section Group";Box4Intl.Box4Strings.l_SectionGroupArrowAltText="Navigate Up";Box4Intl.Box4Strings.l_DefaultUserName="Unknown User";Box4Intl.Box4Strings.l_UserInitialsDelimeter="; ";Box4Intl.Box4Strings.l_PageLoadingText="Loading...";Box4Intl.Box4Strings.l_OreoSpinnerText="Loading Page...";Box4Intl.Box4Strings.l_ConflictPage="Conflict Page";Box4Intl.Box4Strings.l_PageAccessibilityContext="Page {0}";Box4Intl.Box4Strings.l_PageWithSearchResultsAccessibilityContext="Page

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14666), with no line terminators
Category:	dropped
Size (bytes):	14666
Entropy (8bit):	5.192998441009612
Encrypted:	false
SSDEEP:	192:9dbIGOqZ05GyaKzhRCwqyf/q2E+Rh99TzlfVNyv83+LBoaWLNwGfiC8O5PPM:9BiUQhRVfye99Pl9483+LBoaWLqv
MD5:	8880E957219B056B26B67D88CB7FFFF5
SHA1:	BE024ABFE99C2DC447191E2C59DD96FD9352E2C4
SHA-256:	4BBB0DBB03A136E993BB2FB363455E7DCABF84CBB17DE37AD6168B9326E56909
SHA-512:	1E611B1C8D3B7DE4CEE215C989885A6F8256B89A51621B77598A9A363AAF2897FC439DD73860234BA77AB682B84D05437CE0DBBDA59C3C1B5CC9D16662897EC5
Malicious:	false
Reputation:	low
Preview:	if("undefined"!=typeof jSanity)throw"jSanity has been defined, please check if there's any duplicate reference.";jSanity={},function(e){"use strict";var t={inputString:"",maxWidth:"600px",maxHeight:"200px",overflow:"hidden",allowLinks:!0,linkClickCallback:null,customProtocols:{},allowRelativeURLs:!1,allowAudioVideo:!1,unsupportedContentCallback:null,externalContentCallback:function(e,t,r,o){var i;if("attribute"===e&&"src"===t)for(var n in o)if(o.hasOwnProperty(n)&&r.substring(0,n.length)===n){i=!0;break}return i\|\|(r="CSSURL"===e?'url("about:blank")':"about:blank"),r},isolatedTargetDOM:!1,directModifySource:!0,attributePrefix:"jSanity",dataAttributeCallback:null,debugLevel:0,onFinishedCallback:null},r=function(){this.sync=!0,this.jobs=[],this.id=r.globalId++,this.listnerPosfix=0,this.onCompletedListners={},this.onNewJobAddedListners={},this.useSync=function(){this.sync=!0},this.useAsync=function(){this.sync=!1},this.addNewJob=function(e){for(var t in this.jobs.push(e),this.onNewJobAdded

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3735
Entropy (8bit):	4.3933030920706635
Encrypted:	false
SSDEEP:	96:7/fGQ6ScPHMBDh3g7uECJYUymTmhI4n3odG39VoN:7/+Q6pHMhQw6ATw7VC
MD5:	FEBA06F7828F89055FB6E09DDFF06944
SHA1:	C6FCFB6F3992CA6C4C44CAF3D60342958063BE62
SHA-256:	6BA48976AC2251170A2ED243E2666FE441D582478148A160EEBF2E4A1AF6AF51
SHA-512:	620C91082FB4DB2E4B153E75464A1DEC283F8BA4E87C4F3E0327571B197E87BC93BD14E1E943782F9B04AB2F582F5628D5B7A4A00D1A182CBE13C65D8531847E
Malicious:	false
Reputation:	low
URL:	https://euc-onenote.officeapps.live.com/o/AppSettingsHandler.ashx?app=OneNote&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&build=
Preview:	{"timestamp":1728053122095,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"EnableWordSessionRefreshLoggingCleanup":false,"BootstrapperSettingsFetchPeriod":60000,"BootstrapperUlsHeartbeatIntervalMs":5000,"BootstrapperMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"WordRefreshTelemetryExpirationInDays":7,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"03ED953A90AE1A5E8FFD1D650B1E74C0E54D7AFE","RemoteUlsSuppressions":"378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38319), with no line terminators
Category:	dropped
Size (bytes):	38319
Entropy (8bit):	4.894144984125977
Encrypted:	false
SSDEEP:	768:N4k0JvWptT2z2p9GmkNqJ3htY1xYhwn5n9O:CJOptT2Sp9v7htY1xYC5n9O
MD5:	51750E48816F1EC30133B634C2596216
SHA1:	ADCC6F7E3CE25657E15ACE3BF2F941D69D1A5575
SHA-256:	F9D844D7F9BC50FFDE02FF10BD265CD7682FA52C942DA4C989AD4AC6BBDF5094
SHA-512:	A91CB85B094F8B9F71B51E6CD2D18F4B24F6AAE61B32AB3021983D5C184A1AF77E45092608BE00DA667BAE5F44CE648232D21A0AC1EE2703A0115F7AB6B08626
Malicious:	false
Reputation:	low
Preview:	Type.registerNamespace("OneNoteIntl");OneNoteIntl.OneNoteStrings=function(){};OneNoteIntl.OneNoteStrings.registerClass("OneNoteIntl.OneNoteStrings");OneNoteIntl.OneNoteStrings.L_CloudFilesUploadSuccess="Successfully Uploaded : {0}";OneNoteIntl.OneNoteStrings.L_CloudFilesUploadFailed="Error Uploading : {0}";OneNoteIntl.OneNoteStrings.L_ContextMenuSmartLookup="Search";OneNoteIntl.OneNoteStrings.L_ContextMenuTextSmartLookup='Search "{0}"';OneNoteIntl.OneNoteStrings.L_BrowseVersions="Page Versions";OneNoteIntl.OneNoteStrings.L_Camera="Camera";OneNoteIntl.OneNoteStrings.L_CopyNotebook="Copy Notebook";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorMessage="The new experimental sync feature has experienced an error and your change may not be saved.";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorRefreshMessage="Please click here or refresh the webpage to resolve the issue.";OneNoteIntl.OneNoteStrings.L_CopyToCloudDescription="Edit and view this notebook on all your devices";OneNoteIntl.OneNot

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38319), with no line terminators
Category:	downloaded
Size (bytes):	38319
Entropy (8bit):	4.894144984125977
Encrypted:	false
SSDEEP:	768:N4k0JvWptT2z2p9GmkNqJ3htY1xYhwn5n9O:CJOptT2Sp9v7htY1xYC5n9O
MD5:	51750E48816F1EC30133B634C2596216
SHA1:	ADCC6F7E3CE25657E15ACE3BF2F941D69D1A5575
SHA-256:	F9D844D7F9BC50FFDE02FF10BD265CD7682FA52C942DA4C989AD4AC6BBDF5094
SHA-512:	A91CB85B094F8B9F71B51E6CD2D18F4B24F6AAE61B32AB3021983D5C184A1AF77E45092608BE00DA667BAE5F44CE648232D21A0AC1EE2703A0115F7AB6B08626
Malicious:	false
Reputation:	low
URL:	https://c1-onenote-15.cdn.office.net/o/s/hF9D844D7F9BC50FF_App_Scripts/1033/OneNoteIntl.js
Preview:	Type.registerNamespace("OneNoteIntl");OneNoteIntl.OneNoteStrings=function(){};OneNoteIntl.OneNoteStrings.registerClass("OneNoteIntl.OneNoteStrings");OneNoteIntl.OneNoteStrings.L_CloudFilesUploadSuccess="Successfully Uploaded : {0}";OneNoteIntl.OneNoteStrings.L_CloudFilesUploadFailed="Error Uploading : {0}";OneNoteIntl.OneNoteStrings.L_ContextMenuSmartLookup="Search";OneNoteIntl.OneNoteStrings.L_ContextMenuTextSmartLookup='Search "{0}"';OneNoteIntl.OneNoteStrings.L_BrowseVersions="Page Versions";OneNoteIntl.OneNoteStrings.L_Camera="Camera";OneNoteIntl.OneNoteStrings.L_CopyNotebook="Copy Notebook";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorMessage="The new experimental sync feature has experienced an error and your change may not be saved.";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorRefreshMessage="Please click here or refresh the webpage to resolve the issue.";OneNoteIntl.OneNoteStrings.L_CopyToCloudDescription="Edit and view this notebook on all your devices";OneNoteIntl.OneNot

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7444)
Category:	dropped
Size (bytes):	465808
Entropy (8bit):	5.497090758706446
Encrypted:	false
SSDEEP:	6144:itt8eqIuTYT2T2CzUN2GpcklGFHTCH13EHvL5djPjwc5PQwRKhPPVET:iz8eqI5AGpcyGFH1vnXKwT
MD5:	551EA8680A3C80C8C6D920A734AA0034
SHA1:	BC1C3CC4D1A034A26440C742424C17E93B82E74B
SHA-256:	75DA19B882200D935F80C4CDE462FE63B17BBD1E4B6329FD510C7AA364E31FE9
SHA-512:	FDCA3292240C7922E7E6F30A99257023BFB6598327B76D3B039C929348B75F5303E27C336B0135446D13F39505F41F63E566D6E13E0810BE0B2E0E23A737AD88
Malicious:	false
Reputation:	low
Preview:	/! For license information please see wacowlhostwebpack.js.LICENSE.txt /.(()=>{var e=document.currentScript;define("odsp-next/roots/WacOwlHost",["odsp.react.lib"],()=>{var t;return(()=>{"use strict";var n=[(e,t,n)=>{n.r(t),n.d(t,{__assign:()=>r,__asyncDelegator:()=>S,__asyncGenerator:()=>y,__asyncValues:()=>D,__await:()=>v,__awaiter:()=>l,__classPrivateFieldGet:()=>w,__classPrivateFieldSet:()=>E,__createBinding:()=>f,__decorate:()=>s,__exportStar:()=>p,__extends:()=>i,__generator:()=>u,__importDefault:()=>O,__importStar:()=>C,__makeTemplateObject:()=>I,__metadata:()=>d,__param:()=>c,__read:()=>_,__rest:()=>o,__spread:()=>h,__spreadArray:()=>g,__spreadArrays:()=>b,__values:()=>m});var a=function(e,t){return a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},a(e,t)};function i(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29173), with no line terminators
Category:	dropped
Size (bytes):	29173
Entropy (8bit):	5.201883067368051
Encrypted:	false
SSDEEP:	768:Buh4zsotX8wWwnEDbdnkAKBg3HnzJ9Non/e+hjOF:Bo2BT2Dl3TJ9NonW
MD5:	F6228139447C795F72C09114F8289A8C
SHA1:	0D0499DC74723111C0B78792B40BF5B8D04A2FB2
SHA-256:	E6108C2F14C08CE48EB243728C24011A8E70E60DCA21BFA51FFFC6B1B8A999C7
SHA-512:	F3087F1B24B65AA4F2007B168A8F5A1D0ACFA8BB6677FF156CE6A4B4A76234820B390F2DC444DE2EEFC4F58FB35BF3E1F866481A92383C914D20BBD44EDBC0A2
Malicious:	false
Reputation:	low
Preview:	!(function(){if("PerformanceLongTaskTiming"in window){var e=window.__tti={e:[]};e.o=new PerformanceObserver((function(t){e.e=e.e.concat(t.getEntries())}));e.o.observe({entryTypes:["longtask"]})}})();!(function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports["es6-symbol"]=t():(e["es6-symbol"]=t(),e.Symbol=e.Symbol\|\|e["es6-symbol"])})(window,(function(){return(function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 2944, version 4.30147
Category:	downloaded
Size (bytes):	2944
Entropy (8bit):	7.701609844461153
Encrypted:	false
SSDEEP:	48:3bH18jve96elI+0EqyTxBd9iAfZ5bu5oopTBvuF0nYwH22sn8feoKs:LVuvKLlIQqi9iAPNo72e2fnuIs
MD5:	569A610DF4FD269FAA528A2197DFAA9A
SHA1:	CFC7596B939A341C5DDFFC53CFD607745AF18E8F
SHA-256:	09A1411BF361D3D649F4FF5098E0197510232477BF099872F58F5D1EC483E9AF
SHA-512:	EBD67AFCF7779E4700A5441548E3090FF2B17D4D6176160A21C0BB7F72605B6C082294A2A4CED484945685EBF33210FC883AF2AFC18948F7A8C2E62C1A53E242
Malicious:	false
Reputation:	low
URL:	https://c1-onenote-15.cdn.office.net/o/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
Preview:	wOFF..................u.....................OS/2...D...H...`1Y{.cmap.......N...j.F.@cvt ....... .......fpgm...........Y...gasp................glyf.......]...0\.+Hhead...X...2...6.c..hhea...........$....hmtx..............Eloca................maxp........... .%..name...............Spost........... .Q.~prep............x...x.c`a..8.....u..1...4.f...$..........@ ...........<...!$.X............x.c```f.`..F..H....\|... ........\......./..<....../.N..z.....jPs..#.......L....x.c.b.e(`h`X.......x............x.]..N.@..s$..'@:!.uC....K$.%%...J.......n..b.........\|.s...\|v..G)V.7........!O.6eaL.yV.e.j..kN..M.h....Lm....-b....p.N.m.v.....U<..#...O.}.K..,V..&...^...L.c.x.....?ug..l9e..Ns.D....D...K........m..A.M....a.....g.P..`....d.............x..SML.Q...?..,.P-..I..=...4.R....`j4-Q.F...5...h.?$......z.Gc.h.r3.D=..n\|.RR..a....L.{.f..I...w......iu;..I2.}.<.......[l.......(,..g`...`u....q..."G.yW.."nQ.P(...[....p@..P...-b.CA.z8.zD..CW=/x..... U...F.$..%"...(aURI.UNE

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	dropped
Size (bytes):	141219
Entropy (8bit):	5.330502875132488
Encrypted:	false
SSDEEP:	1536:6rekafzVM8v4ZvE3DUJ/N0SoY+2d2j6Cha18suGEYE4yH/OqyOPGkB6ORJDJ:6ekl8v4ZvEQUSov2dqha1JefOzgRJt
MD5:	403C9E15ABC6E04677EE49B1F44F6083
SHA1:	1C2ECE54EC310A63B9437DB2B28FFB661B4EE12C
SHA-256:	CA2ABA12887DBD9FFBD17848EFC960CC070FFFFFF9DA87263CDE47BDD3D3B830
SHA-512:	7037868B5132B66EF78DF370E850A7BF87FCD6962FDD16AC47751D0D95395F5B16B70EC90C39D294A69146B67EDD00873BC32F9828E8087E9940C83E31F29D16
Malicious:	false
Reputation:	low
Preview:	/! For license information please see odsp.1ds.lib-67f10919.js.LICENSE.txt /."use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["odsp.1ds.lib"],{"1ds-lib":function(e,t,n){n.r(t),n.d(t,{_InMemoryPropertyStorage:function(){return Ls},_OneDSLogger:function(){return As}});var a={};n.r(a),n.d(a,{optionalDiagnostic:function(){return fs},requiredDiagnostic:function(){return us},requiredService:function(){return ps}});var i=function(e,t){return i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},i(e,t)};function r(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}i(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var o=function(){return o=Object.assign\|\|function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var i i

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5949), with no line terminators
Category:	dropped
Size (bytes):	5949
Entropy (8bit):	5.021760613857532
Encrypted:	false
SSDEEP:	96:Vq+J+ZRrxLuL7H9T4Mh+HsQ7qQYHq3l0e4QDhMWp:xJ+ZR07HNhhw7qQYHq3l0e4P8
MD5:	BBF6A2B6E77972F0718F99C86AE3FE92
SHA1:	806E8C002AE178B41819BEAFE123AE09202DF966
SHA-256:	78FF6158246E4FA25F994827F90ED69FEEF349AA57449CB404E35C3026BD4B8A
SHA-512:	4B4F58735190254E74ED9BAF547046642F622EE35414784A093356D28982A28A5D84E4CE71E476A88BC43583B6BB2D916B16A733D67D5B30E145DC2E4182BC8C
Malicious:	false
Reputation:	low
Preview:	function __loadCompat(n){n.Debug=function(){};n.Debug._fail=function(n){throw new Error(n);};n.Debug.writeln=function(n){window.console&&window.console.debug(n)};n.__getNonTextNode=function(n){try{while(n&&n.nodeType!=1)n=n.parentNode}catch(t){n=null}return n}}function _loadSafariCompat(){Node.prototype.__defineGetter__("text",function(){return this.textContent});Node.prototype.__defineSetter__("text",function(n){this.textContent=n});Node.prototype.selectNodes=function(n){var t=this.ownerDocument;return selectNodes(t,n,this)};Node.prototype.selectSingleNode=function(n){var t=this.ownerDocument;return selectSingleNode(t,n,this)};Document.prototype.selectNodes=function(n){return selectNodes(this,n,this.documentElement)};Document.prototype.selectSingleNode=function(n){return selectSingleNode(this,n,this.documentElement)}}function _loadMozillaCompat(n){n.navigate=function(n){window.setTimeout('window.location = "'+n+'";',0)};var t=function(n,t){t._mozillaEventHandler=function(n){return win

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	468288
Entropy (8bit):	5.396460488004215
Encrypted:	false
SSDEEP:	12288:5G8JjHqc4zxn+9xVpkL59tJjseN0S37BD9nr:6nr
MD5:	0774450A0443B9BD2D1F698E7450AA5D
SHA1:	6E3834A47B7DB6920A82FE792600FC84CB6BFAA9
SHA-256:	63C985581AB7117F4A9922EB0046426777F6D53675E80EFEDC4C784B49E12BAF
SHA-512:	3F16F5B6968CC57A063B84FD1FE3348526B0686531C810CE2DCFDF8595FBF896C2A0A80BEE4E114AD1A217CE4014AEC255BAAFD02BEA8FFECCDFD49B5DF81C32
Malicious:	false
Reputation:	low
URL:	https://c1-onenote-15.cdn.office.net/o/s/h63C985581AB7117F_resources/1033/OneNote.Refresh.css
Preview:	.headBrand{cursor:default;line-height:48px;font-size:22px;margin-left:20px;margin-right:20px;font-family:'SegoeUI-SemiLight-final','Segoe UI SemiLight','Segoe UI WPC Semilight','Segoe UI',Segoe,Tahoma,Helvetica,Arial,sans-serif;}.cui-topBar1-transistionalHeaderUI .headBrand{width:auto !important;height:24px !important;line-height:normal !important;padding-bottom:12px;padding-top:12px;display:inline-block;font-size:17px;font-family:inherit;margin-left:17px;margin-right:17px;font-family:'Segoe UI','Segoe UI Web',Arial,Verdana,sans-serif;}.cui-topBar1-transitionalReactHeaderUI .headBrand{width:auto !important;line-height:48px !important;padding:0 6px;display:inline-block;font-size:16px;font-weight:600;font-family:"Segoe UI","Segoe UI Web (West European)","Segoe UI",-apple-system,BlinkMacSystemFont,Roboto,"Helvetica Neue",sans-serif;}@font-face{font-family:"Segoe UI Web Light";font-style:normal;font-weight:normal;src:local("Segoe UI Light"),url('./segoeuil.woff') format('woff'),url('./sego

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 4, 2024 16:44:36.340481997 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:36.340560913 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:36.591361046 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:45.973352909 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:46.082779884 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:46.285506964 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:47.426572084 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:47.426630974 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:47.426692963 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:47.427112103 CEST	49710	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:47.427126884 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:47.427184105 CEST	49710	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:47.427417040 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:47.427431107 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:47.427580118 CEST	49710	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:47.427593946 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:47.827728987 CEST	49713	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:44:47.827780962 CEST	443	49713	142.250.186.36	192.168.2.5
Oct 4, 2024 16:44:47.827863932 CEST	49713	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:44:47.828064919 CEST	49713	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:44:47.828075886 CEST	443	49713	142.250.186.36	192.168.2.5
Oct 4, 2024 16:44:47.861753941 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 4, 2024 16:44:47.861953974 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:48.012809038 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.013223886 CEST	49710	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.013263941 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.014471054 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.014556885 CEST	49710	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.015933037 CEST	49710	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.016031981 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.016231060 CEST	49710	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.016237974 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.068309069 CEST	49710	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.099061966 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.100327969 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.100353003 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.101492882 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.101605892 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.101959944 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.102021933 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.148349047 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.148387909 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.192490101 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.481772900 CEST	443	49713	142.250.186.36	192.168.2.5
Oct 4, 2024 16:44:48.484921932 CEST	49713	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:44:48.484961987 CEST	443	49713	142.250.186.36	192.168.2.5
Oct 4, 2024 16:44:48.486066103 CEST	443	49713	142.250.186.36	192.168.2.5
Oct 4, 2024 16:44:48.486143112 CEST	49713	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:44:48.490055084 CEST	49713	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:44:48.490184069 CEST	443	49713	142.250.186.36	192.168.2.5
Oct 4, 2024 16:44:48.505234957 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.505270004 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.505314112 CEST	49710	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.505336046 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.505382061 CEST	49710	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.505539894 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.505625963 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.505673885 CEST	49710	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.511483908 CEST	49710	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.511528015 CEST	443	49710	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.517095089 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.517219067 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.537923098 CEST	49713	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:44:48.537936926 CEST	443	49713	142.250.186.36	192.168.2.5
Oct 4, 2024 16:44:48.583580971 CEST	49713	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:44:48.974472046 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.974498034 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.974551916 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.974566936 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.974611044 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.975503922 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.975511074 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.975543022 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.975545883 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.975583076 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:48.976229906 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:48.976284981 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.065366983 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.065382004 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.065505981 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.065519094 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.066050053 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.066077948 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.066109896 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.066118002 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.066140890 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.067250013 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.067307949 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.067317009 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.068730116 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.069463968 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.069478989 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.112554073 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.138834000 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.138853073 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.138897896 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.138926029 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.138958931 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.156094074 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.156105042 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.156172991 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.156188011 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.157263041 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.157289028 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.157331944 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.157342911 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.157363892 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.158638000 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.158689976 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.158698082 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.159252882 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.159298897 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.159307957 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.160439968 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.160497904 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.160506010 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.161628008 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.161688089 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.161700964 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.207211018 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.229307890 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.229322910 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.229357004 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.229404926 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.229459047 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.260246038 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.260267973 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.260406017 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.260432005 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.260723114 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.260757923 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.260785103 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.260792971 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.260813951 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.261466026 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.261559010 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.261564970 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.262804985 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.262868881 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.262883902 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.264647961 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.264672041 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.264729977 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.264745951 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.264801025 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.265311003 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.265372038 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.265486956 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.302421093 CEST	49709	443	192.168.2.5	13.107.136.10
Oct 4, 2024 16:44:49.302491903 CEST	443	49709	13.107.136.10	192.168.2.5
Oct 4, 2024 16:44:49.360949039 CEST	49716	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:49.360999107 CEST	443	49716	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:49.361088037 CEST	49716	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:49.362432003 CEST	49716	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:49.362451077 CEST	443	49716	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:49.939938068 CEST	443	49716	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:49.963963032 CEST	49716	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:49.963990927 CEST	443	49716	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:49.965239048 CEST	443	49716	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:49.965307951 CEST	49716	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:49.965317011 CEST	443	49716	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:49.965353012 CEST	49716	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.280040026 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:50.280095100 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:50.280158043 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:50.282556057 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:50.282589912 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:50.634269953 CEST	49716	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.634462118 CEST	443	49716	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:50.674928904 CEST	49716	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.674954891 CEST	443	49716	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:50.723746061 CEST	49716	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.845382929 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.845427990 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:50.845621109 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.846225977 CEST	49724	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.846261978 CEST	443	49724	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:50.846702099 CEST	49725	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.846744061 CEST	443	49725	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:50.846771955 CEST	49724	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.847057104 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.847074986 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:50.847213984 CEST	49725	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.847424984 CEST	49725	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.847434044 CEST	443	49725	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:50.847543001 CEST	49724	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.847556114 CEST	443	49724	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:50.856749058 CEST	49716	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.899409056 CEST	443	49716	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:50.908914089 CEST	49726	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.908957958 CEST	443	49726	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:50.910660982 CEST	49726	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.911835909 CEST	49726	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:50.911848068 CEST	443	49726	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:50.927216053 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:50.927573919 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:51.023922920 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:51.023960114 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:51.024307013 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:51.035953045 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.036005020 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.036475897 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.043220997 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.043243885 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.048676014 CEST	443	49716	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.049210072 CEST	443	49716	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.049609900 CEST	49716	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.051734924 CEST	49716	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.051748037 CEST	443	49716	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.066332102 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:51.276326895 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:51.319406033 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:51.414782047 CEST	443	49725	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.417078972 CEST	443	49724	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.421188116 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.442701101 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.442707062 CEST	49725	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.442722082 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.442734003 CEST	443	49725	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.443780899 CEST	443	49725	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.443792105 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.443878889 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.443882942 CEST	49725	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.443886995 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.443891048 CEST	443	49725	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.443945885 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.443948030 CEST	49725	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.449851990 CEST	49724	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.449917078 CEST	443	49724	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.450964928 CEST	443	49724	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.451041937 CEST	49724	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.451061964 CEST	443	49724	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.451231956 CEST	49724	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.469471931 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:51.469532967 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:51.469818115 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:51.476875067 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.477042913 CEST	49725	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.477045059 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.477185011 CEST	443	49725	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.485039949 CEST	443	49726	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.491365910 CEST	49726	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.491369963 CEST	49724	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.491394997 CEST	443	49726	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.491460085 CEST	443	49724	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.491657972 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.491657972 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.491677046 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.491780043 CEST	49725	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.491796017 CEST	443	49725	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.491869926 CEST	49724	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.491879940 CEST	443	49724	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.492237091 CEST	443	49726	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.495080948 CEST	49726	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.495167971 CEST	443	49726	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.495290041 CEST	49726	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.495290041 CEST	49726	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.495313883 CEST	443	49726	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.501949072 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:51.501949072 CEST	49720	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:51.501965046 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:51.501974106 CEST	443	49720	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:51.536571980 CEST	49724	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.536573887 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.536573887 CEST	49725	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.539403915 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.575660944 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:51.575692892 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:51.575905085 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:51.578361034 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:51.578383923 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:51.583812952 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:51.583873034 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:51.585072041 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:51.586472988 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:51.586508036 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:51.608623028 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.610189915 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.610218048 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.610752106 CEST	443	49724	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.610961914 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.610975981 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.611069918 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.611084938 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.611249924 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.611397028 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.611443996 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.611553907 CEST	443	49724	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.611632109 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.611632109 CEST	49724	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.612036943 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.612148046 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.612154961 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.612205029 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.613270044 CEST	49724	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.613281965 CEST	443	49724	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.613689899 CEST	443	49725	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.613713026 CEST	443	49725	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.613801956 CEST	443	49725	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.613828897 CEST	49725	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.613850117 CEST	49725	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.615490913 CEST	49723	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.615505934 CEST	443	49723	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.616077900 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.616189003 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.617660999 CEST	49725	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.617671013 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.617680073 CEST	443	49725	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.617697001 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.617732048 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.617779970 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.660032034 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.691847086 CEST	443	49726	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.691993952 CEST	49726	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.692018032 CEST	443	49726	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.692162991 CEST	49726	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.692339897 CEST	443	49726	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.692408085 CEST	443	49726	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.692600965 CEST	49726	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.701353073 CEST	49726	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.701370955 CEST	443	49726	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.720664978 CEST	49737	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.720700979 CEST	443	49737	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.725270987 CEST	49737	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.725451946 CEST	49737	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.725474119 CEST	443	49737	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.842005014 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.842039108 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.842098951 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.842128992 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.842166901 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.843277931 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.843301058 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.843343019 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.843369007 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.843375921 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.843771935 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.843822002 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.843828917 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.927963018 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.928046942 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.928076982 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.929327965 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.929339886 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.929362059 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.929390907 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.929405928 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.929418087 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.930517912 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.930529118 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.930542946 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.930568933 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.930577993 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.930596113 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.932107925 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.932118893 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:51.932178020 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:51.932189941 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.014899015 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.014941931 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.014974117 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.014996052 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.015017033 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.015665054 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.015674114 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.015693903 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.015713930 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.015721083 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.015743971 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.016654968 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.016664028 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.016684055 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.016705990 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.016715050 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.016726017 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.016730070 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.016772032 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.016777992 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.016823053 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.017205954 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.017256021 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.018320084 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.018326998 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.018378019 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.018388033 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.018403053 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.018418074 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.018423080 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.018460989 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.019211054 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.019264936 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.019273043 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.020248890 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.020297050 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.020307064 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.061707973 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.101748943 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.101783991 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.101835012 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.101880074 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.101891041 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.102279902 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.102329016 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.102335930 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.102350950 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.102380037 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.103101969 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.103163004 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.103169918 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.103595972 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.103662014 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.103671074 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.104703903 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.104768038 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.104778051 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.105206013 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.105264902 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.105273008 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.106128931 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.106199026 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.106206894 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.106992006 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.107058048 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.107065916 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.107698917 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.107753992 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.107762098 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.107826948 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.107878923 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.107887030 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.137891054 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.137979984 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.137996912 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.138870001 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.138945103 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.138952971 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.139225960 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.139282942 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.139292002 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.149211884 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.149303913 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.149317980 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.149424076 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.149471998 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.177727938 CEST	49727	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.177758932 CEST	443	49727	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.229523897 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:52.229650021 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:52.246742010 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.246856928 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.289675951 CEST	443	49737	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.364976883 CEST	49737	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.581795931 CEST	49737	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.581809998 CEST	443	49737	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.585967064 CEST	443	49737	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.586003065 CEST	443	49737	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.586034060 CEST	49737	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.592845917 CEST	49738	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.592875957 CEST	443	49738	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.592947006 CEST	49738	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.603368044 CEST	49738	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.603400946 CEST	443	49738	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.631366014 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:52.631400108 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:52.631809950 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:52.634196043 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:52.643227100 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.643241882 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.643713951 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.679399014 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:52.681834936 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.723391056 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.755347013 CEST	49737	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.755368948 CEST	443	49737	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.778279066 CEST	49737	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.778702974 CEST	443	49737	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.778948069 CEST	49737	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.778963089 CEST	443	49737	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.789302111 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.789328098 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.789335966 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.789345980 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.789398909 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.789423943 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.789441109 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.789464951 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.790471077 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.821243048 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:52.821681976 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:52.821928978 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:52.863178968 CEST	49737	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.876944065 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.876960039 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.876995087 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.877048969 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.877057076 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.877115011 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.879606009 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.879627943 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.879664898 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.879667997 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.879729986 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.883676052 CEST	49729	443	192.168.2.5	184.28.90.27
Oct 4, 2024 16:44:52.883701086 CEST	443	49729	184.28.90.27	192.168.2.5
Oct 4, 2024 16:44:52.889570951 CEST	443	49737	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.890033007 CEST	443	49737	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.890105009 CEST	49737	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.911962986 CEST	49737	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:52.911990881 CEST	443	49737	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:52.970851898 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.970874071 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.970959902 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.970971107 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.971014023 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.972944975 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.972961903 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.973026037 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.973030090 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.973067999 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.974848032 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.974864006 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.974926949 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.974936008 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.975004911 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.976706028 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.976722956 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.976767063 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.976773024 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:52.976810932 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:52.976828098 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.058223009 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.058253050 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.058351994 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.058367014 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.058432102 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.059488058 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.059506893 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.059578896 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.059586048 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.059622049 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.061106920 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.061122894 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.061177015 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.061182976 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.061220884 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.062629938 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.062647104 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.062733889 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.062733889 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.062741041 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.062788010 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.064393044 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.064408064 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.064493895 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.064500093 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.064542055 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.064659119 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.065093040 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.065112114 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.065165043 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.065171003 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.065220118 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.066037893 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.066098928 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.066102982 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.066116095 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.066143990 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.066169977 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.066422939 CEST	49730	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.066435099 CEST	443	49730	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.167186975 CEST	443	49738	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:53.202853918 CEST	49738	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:53.202877045 CEST	443	49738	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:53.203319073 CEST	443	49738	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:53.203969002 CEST	49738	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:53.204122066 CEST	443	49738	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:53.204719067 CEST	49738	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:53.204750061 CEST	443	49738	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:53.275866985 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.275907993 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.276591063 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.277515888 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.277524948 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.277585030 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.279390097 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.279431105 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.279567957 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.290647984 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.290657997 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.291033030 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.291052103 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.291604042 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.291615963 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.298829079 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.298873901 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.299096107 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.299958944 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.299972057 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.300093889 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.300121069 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.300199986 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.302661896 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:53.302670002 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:53.379435062 CEST	443	49738	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:53.379496098 CEST	49738	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:53.379502058 CEST	443	49738	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:53.379547119 CEST	49738	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:53.386262894 CEST	49738	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:53.386280060 CEST	443	49738	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:54.941052914 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:54.947959900 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:54.949002981 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:54.949022055 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:54.949680090 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.002007961 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.002008915 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.064385891 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.064452887 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.064452887 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.165221930 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.165260077 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.165314913 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.165780067 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.165822983 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.165977001 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.170017004 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.170034885 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.170167923 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.170202017 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.175446987 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.175467014 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.176007986 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.176016092 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.176275969 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.176299095 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.176717997 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.176726103 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.176959991 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.176989079 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.178275108 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.178297043 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.178560972 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.178594112 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.179111004 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.179120064 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.179574013 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.179584980 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.179935932 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.179949045 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.273307085 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.273757935 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.273783922 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.273845911 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.273848057 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.273896933 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.274629116 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.274698973 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.277105093 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.277131081 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.277196884 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.277220011 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.277411938 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.277468920 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.277483940 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.278040886 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.278214931 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.284742117 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.284769058 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.284883976 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.284898996 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.284982920 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.285413027 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.285461903 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.285516977 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.350305080 CEST	49763	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.350358963 CEST	443	49763	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.350497961 CEST	49763	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.351499081 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.351538897 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.351629972 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.351773024 CEST	49763	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.351790905 CEST	443	49763	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.351963997 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.351982117 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.359811068 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.359841108 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.359863997 CEST	49749	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.359870911 CEST	443	49749	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.404933929 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.404933929 CEST	49747	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.404968977 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.404979944 CEST	443	49747	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.407197952 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.407197952 CEST	49746	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.407238960 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.407249928 CEST	443	49746	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.408241034 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.408267975 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.408277988 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.408283949 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.412383080 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.412414074 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.412426949 CEST	49748	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.412432909 CEST	443	49748	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.562103987 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.562144041 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.562212944 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.563858986 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.563869953 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.565799952 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.565855026 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.566085100 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.566252947 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.566267014 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.573509932 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.573566914 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.573944092 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.576184988 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.576241970 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.576304913 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.576493979 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.576519966 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.579400063 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.579427958 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.580763102 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.580799103 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.580878019 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.581078053 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:55.581094027 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:55.877638102 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.878026962 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.878051996 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.878133059 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.878391027 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.878406048 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.879204988 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.879266977 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.879273891 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.879317999 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.879478931 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.879539967 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.879547119 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.879591942 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.879959106 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.880026102 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.880259037 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.880335093 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.880389929 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.880395889 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.906573057 CEST	443	49763	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.906853914 CEST	49763	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.906868935 CEST	443	49763	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.907269955 CEST	443	49763	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.907753944 CEST	49763	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.907783031 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.907802105 CEST	49763	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.907833099 CEST	443	49763	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.908020973 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.908032894 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.908402920 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.908696890 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.908759117 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.908910990 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.908929110 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:55.909024954 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:55.909039021 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.005304098 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.005326986 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.067101955 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.067115068 CEST	49763	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.084736109 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.084749937 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.084788084 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.084808111 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.084837914 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.084856987 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.085401058 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.085448027 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.087485075 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.087505102 CEST	443	49755	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.087513924 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.087547064 CEST	49755	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.090876102 CEST	443	49763	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.090934992 CEST	49763	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.090948105 CEST	443	49763	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.090980053 CEST	443	49763	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.091022968 CEST	49763	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.091434956 CEST	49763	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.091447115 CEST	443	49763	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.094408989 CEST	49775	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.094454050 CEST	443	49775	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.094520092 CEST	49775	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.094928980 CEST	49775	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.094942093 CEST	443	49775	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.096962929 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.139396906 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.275598049 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.275609970 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.275633097 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.275670052 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.275684118 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.275696039 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.275715113 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.275760889 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.276865005 CEST	49754	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.276875973 CEST	443	49754	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.407692909 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.407881975 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.411998034 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.418294907 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.418324947 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.418920040 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.418925047 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.419023991 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.419045925 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.419199944 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.419214964 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.419604063 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.419608116 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.419666052 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.419671059 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.447530031 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.448124886 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.448138952 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.448823929 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.448828936 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.460169077 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.464112997 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.464135885 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.464968920 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.464975119 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.517903090 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.517971992 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.518013954 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.518239021 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.518260002 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.518269062 CEST	49769	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.518275023 CEST	443	49769	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.519229889 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.519280910 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.519321918 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.519593000 CEST	49767	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.519607067 CEST	443	49767	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.523433924 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.523479939 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.523538113 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.523891926 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.523904085 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.524327040 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.524338007 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.524390936 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.524507999 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.524517059 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.532504082 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.532526970 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.532567978 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.532577038 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.532632113 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.532692909 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.532697916 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.534643888 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.534791946 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.534796000 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.534858942 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.538830996 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.538889885 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.539031982 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.539119005 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.539130926 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.539140940 CEST	49768	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.539148092 CEST	443	49768	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.541599035 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.541625977 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.541682959 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.541870117 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.541877985 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.554582119 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.554697990 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.554754019 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.554922104 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.554934025 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.554959059 CEST	49770	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.554963112 CEST	443	49770	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.558042049 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.558078051 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.558137894 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.558288097 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.558299065 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.566632986 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.566721916 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.566797018 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.567473888 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.567473888 CEST	49766	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.567518950 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.567547083 CEST	443	49766	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.573241949 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.573282003 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.573371887 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.573512077 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:56.573523998 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:56.620223999 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.620320082 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.620333910 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.621383905 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.621445894 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.621450901 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.622421980 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.622479916 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.622484922 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.624010086 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.624073029 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.624078035 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.647480011 CEST	443	49775	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.647834063 CEST	49775	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.647859097 CEST	443	49775	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.648232937 CEST	443	49775	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.648652077 CEST	49775	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.648715973 CEST	443	49775	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.648920059 CEST	49775	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.648947001 CEST	443	49775	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.707330942 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.707407951 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.707425117 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.707436085 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.707447052 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.707454920 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.707501888 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.707509995 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.707999945 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.708009005 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.708059072 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.708065033 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.708271980 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.708281040 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.708317995 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.708323002 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.708363056 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.708463907 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.708506107 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.708511114 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.708555937 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.708597898 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.709330082 CEST	49764	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.709346056 CEST	443	49764	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.722274065 CEST	49787	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.722297907 CEST	443	49787	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.722357035 CEST	49787	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.722547054 CEST	49787	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.722575903 CEST	443	49787	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.842164040 CEST	443	49775	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.842394114 CEST	443	49775	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.842431068 CEST	49775	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.842772007 CEST	49775	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.842782021 CEST	443	49775	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.842812061 CEST	49775	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.843058109 CEST	49775	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.845881939 CEST	49789	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.845890999 CEST	443	49789	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:56.846051931 CEST	49789	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.846318960 CEST	49789	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:56.846329927 CEST	443	49789	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.178997040 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.189582109 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.189582109 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.189687014 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.189719915 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.195789099 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.198405027 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.198405027 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.198438883 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.198453903 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.198664904 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.200328112 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.200329065 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.200365067 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.200392962 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.210782051 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.212409019 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.212440968 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.212945938 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.212951899 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.266052961 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.267096996 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.267110109 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.268484116 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.268487930 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.282773972 CEST	443	49787	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.283083916 CEST	49787	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.283121109 CEST	443	49787	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.283480883 CEST	443	49787	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.284097910 CEST	49787	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.284181118 CEST	443	49787	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.285515070 CEST	49787	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.287666082 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.287825108 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.288885117 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.291068077 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.291091919 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.291119099 CEST	49782	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.291126013 CEST	443	49782	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.293955088 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.293989897 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.294130087 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.294924021 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.294943094 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.295855045 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.295902014 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.295972109 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.296825886 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.296825886 CEST	49784	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.296852112 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.296860933 CEST	443	49784	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.303859949 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.303926945 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.306266069 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.306298018 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.306322098 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.306428909 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.306428909 CEST	49781	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.306449890 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.306461096 CEST	443	49781	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.306477070 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.307009935 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.307018995 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.310477018 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.310492992 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.310703993 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.310878992 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.310892105 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.314203978 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.314263105 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.314342976 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.314475060 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.314475060 CEST	49783	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.314485073 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.314493895 CEST	443	49783	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.322763920 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.322803974 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.323745012 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.323999882 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.324042082 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.331397057 CEST	443	49787	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.371865988 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.371931076 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.372942924 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.372942924 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.373181105 CEST	49785	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.373198032 CEST	443	49785	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.376416922 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.376463890 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.376667976 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.376667976 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.376703024 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.411286116 CEST	443	49789	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.468905926 CEST	49789	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.472372055 CEST	443	49787	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.472784996 CEST	443	49787	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.477189064 CEST	49787	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.704315901 CEST	49797	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.704413891 CEST	443	49797	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.704528093 CEST	49797	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.704540014 CEST	49789	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.704616070 CEST	443	49789	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.705218077 CEST	443	49789	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.705746889 CEST	49797	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.705785036 CEST	443	49797	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.706125975 CEST	49789	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.706125975 CEST	49789	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.706214905 CEST	443	49789	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.743596077 CEST	49787	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.743666887 CEST	443	49787	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.763175964 CEST	49789	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.890130997 CEST	443	49789	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.890141010 CEST	443	49789	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.890177011 CEST	443	49789	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.890208006 CEST	49789	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.890269041 CEST	443	49789	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.890295982 CEST	443	49789	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.890304089 CEST	49789	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.890341043 CEST	49789	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.892360926 CEST	49789	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:57.892393112 CEST	443	49789	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:57.953835011 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.954256058 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.954797983 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.954821110 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.954849005 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.954862118 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.955408096 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.955408096 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.955414057 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.955425978 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.966207981 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.968019009 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.968086958 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.968744993 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.968760014 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.993448019 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.995325089 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.995413065 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:57.996035099 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:57.996048927 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.029659033 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.030128956 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.030155897 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.031034946 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.031040907 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.053694010 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.053833961 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.053906918 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.054392099 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.054452896 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.054498911 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.054713964 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.054732084 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.054743052 CEST	49793	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.054748058 CEST	443	49793	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.054964066 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.054968119 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.054996014 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.055000067 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.058749914 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.058808088 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.058881044 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.058881044 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.058912992 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.058959961 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.059053898 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.059068918 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.059133053 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.059144974 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.077356100 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.077512980 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.077608109 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.077689886 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.077689886 CEST	49792	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.077732086 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.077758074 CEST	443	49792	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.081242085 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.081309080 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.081393957 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.081808090 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.081840038 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.098440886 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.098505020 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.098573923 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.098756075 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.098756075 CEST	49795	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.098797083 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.098819971 CEST	443	49795	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.101247072 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.101272106 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.101351023 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.101492882 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.101502895 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.129837990 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.129894972 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.129978895 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.130214930 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.130239964 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.130250931 CEST	49796	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.130258083 CEST	443	49796	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.134330034 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.134396076 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.134478092 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.134654045 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.134673119 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.279779911 CEST	443	49797	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:58.280086040 CEST	49797	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:58.280108929 CEST	443	49797	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:58.280458927 CEST	443	49797	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:58.280801058 CEST	49797	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:58.280869007 CEST	443	49797	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:58.281012058 CEST	49797	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:58.281033039 CEST	443	49797	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:58.382462025 CEST	443	49713	142.250.186.36	192.168.2.5
Oct 4, 2024 16:44:58.382528067 CEST	443	49713	142.250.186.36	192.168.2.5
Oct 4, 2024 16:44:58.382781982 CEST	49713	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:44:58.466731071 CEST	443	49797	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:58.466797113 CEST	49797	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:58.466805935 CEST	443	49797	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:58.466846943 CEST	49797	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:58.467361927 CEST	49797	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:44:58.467377901 CEST	443	49797	52.108.8.12	192.168.2.5
Oct 4, 2024 16:44:58.702114105 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.703274012 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.703316927 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.705404043 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.705411911 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.742049932 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.747036934 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.747065067 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.747787952 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.747793913 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.748759031 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.749959946 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.749973059 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.750812054 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.750816107 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.755531073 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.755943060 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.755964994 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.756642103 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.756645918 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.782520056 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.783217907 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.783245087 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.784006119 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.784012079 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.810051918 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.810116053 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.810367107 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.810638905 CEST	49802	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.810656071 CEST	443	49802	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.813407898 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.813446999 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.813510895 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.813652039 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.813661098 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.822076082 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:58.822263956 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:58.822611094 CEST	49808	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:58.822639942 CEST	443	49808	23.1.237.91	192.168.2.5
Oct 4, 2024 16:44:58.822702885 CEST	49808	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:58.823131084 CEST	49808	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:58.823148012 CEST	443	49808	23.1.237.91	192.168.2.5
Oct 4, 2024 16:44:58.826999903 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 4, 2024 16:44:58.827265024 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 4, 2024 16:44:58.851046085 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.851115942 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.852960110 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.856599092 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.856767893 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.856838942 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.862811089 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.862868071 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.862945080 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.883297920 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.883352995 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.883424044 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.899029016 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.899080038 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.899135113 CEST	49801	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.899171114 CEST	443	49801	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.900727034 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.900739908 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.900784969 CEST	49805	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.900790930 CEST	443	49805	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.917370081 CEST	49804	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.917390108 CEST	443	49804	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.919327021 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.919344902 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.919357061 CEST	49803	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.919363022 CEST	443	49803	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.938132048 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.938184977 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.938261986 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.938302994 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.938307047 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.938359976 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.938849926 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.938865900 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.938941956 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.938952923 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.939122915 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.939165115 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.939239025 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.939333916 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.939341068 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.939639091 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.939722061 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:58.940150976 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.940294981 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:58.940325022 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.429311991 CEST	443	49808	23.1.237.91	192.168.2.5
Oct 4, 2024 16:44:59.429389000 CEST	49808	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:44:59.477097988 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.478291988 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.478333950 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.478835106 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.478847980 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.525191069 CEST	49713	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:44:59.525222063 CEST	443	49713	142.250.186.36	192.168.2.5
Oct 4, 2024 16:44:59.584662914 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.587943077 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.587980986 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.588778019 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.588784933 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.595194101 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.595513105 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.595581055 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.596014023 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.596034050 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.596041918 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.596539974 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.596548080 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.596754074 CEST	49807	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.596772909 CEST	443	49807	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.603451014 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.603491068 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.603688955 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.607569933 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.607584000 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.613416910 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.620409966 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.620454073 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.622117996 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.622133017 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.648010969 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.648694038 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.648720026 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.649185896 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.649189949 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.701389074 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.701458931 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.701508999 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.701771021 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.701797009 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.701807976 CEST	49810	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.701812983 CEST	443	49810	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.705065012 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.705108881 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.705216885 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.705441952 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.705454111 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.708422899 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.708477974 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.709094048 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.710585117 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.710598946 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.710612059 CEST	49812	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.710617065 CEST	443	49812	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.713644981 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.713686943 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.713803053 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.714003086 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.714014053 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.734947920 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.735037088 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.735124111 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.735541105 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.735559940 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.735605955 CEST	49813	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.735613108 CEST	443	49813	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.741247892 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.741286039 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.741345882 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.741624117 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.741632938 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.759265900 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.759356976 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.759408951 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.759726048 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.759758949 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.759778023 CEST	49811	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.759788990 CEST	443	49811	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.764765978 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.764807940 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 4, 2024 16:44:59.765036106 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.765254021 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:44:59.765265942 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.265495062 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.300247908 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.300277948 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.301197052 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.301202059 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.366163969 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.367229939 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.367260933 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.370306015 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.370832920 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.370840073 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.372298956 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.372318983 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.373174906 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.373182058 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.378437042 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.383476019 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.383508921 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.385030985 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.385051012 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.396406889 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.396476030 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.396586895 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.398112059 CEST	49815	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.398127079 CEST	443	49815	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.402395010 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.402424097 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.402503014 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.402901888 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.402909994 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.413803101 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.416224957 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.416235924 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.416879892 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.416883945 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.467896938 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.467968941 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.468310118 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.470171928 CEST	49818	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.470191002 CEST	443	49818	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.471487045 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.471683025 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.471736908 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.472178936 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.472208023 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.472234011 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.472239971 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.480123997 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.480170965 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.480238914 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.480341911 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.480411053 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.480510950 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.480671883 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.480684042 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.480853081 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.480865002 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.480874062 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.480879068 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.481791973 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.481800079 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.482120991 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.482255936 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.482269049 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.483377934 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.483412981 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.483493090 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.483596087 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.483604908 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.519723892 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.519809961 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.519860029 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.522844076 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.522855997 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.528017044 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.528033018 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:00.528126955 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.528318882 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:00.528326988 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.049263000 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.050263882 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.050285101 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.053654909 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.053659916 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.123550892 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.124161005 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.124191999 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.124658108 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.124664068 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.150113106 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.150185108 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.150240898 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.150500059 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.150512934 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.150530100 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.150535107 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.153345108 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.153891087 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.153918028 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.154266119 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.154297113 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.154365063 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.154522896 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.154529095 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.154536009 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.154539108 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.169171095 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.169688940 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.169709921 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.170155048 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.170159101 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.177386999 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.178138018 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.178152084 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.178571939 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.178575993 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.222981930 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.223050117 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.223090887 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.223342896 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.223366022 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.223377943 CEST	49824	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.223391056 CEST	443	49824	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.229639053 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.229711056 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.229795933 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.229943037 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.229974031 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.266942024 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.267000914 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.268112898 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.271595955 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.271661043 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.271733999 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.277324915 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.277388096 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.277483940 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.291145086 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.291158915 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.291168928 CEST	49826	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.291174889 CEST	443	49826	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.292510986 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.292535067 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.293350935 CEST	49825	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.293355942 CEST	443	49825	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.298830032 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.298871994 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.298973083 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.299904108 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.299945116 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.300021887 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.300817013 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.300837040 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.300899982 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.300916910 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.310411930 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.310484886 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.310554981 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.310774088 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.310801029 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.816694975 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.820837975 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.820863008 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.821723938 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.821733952 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.907172918 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.907716036 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.907751083 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.908360004 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.908366919 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.943370104 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.943485975 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.944272995 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.946305990 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.959309101 CEST	49828	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.959335089 CEST	443	49828	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.962146044 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.962161064 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.962929010 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.962934017 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.966540098 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.966587067 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.966658115 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.966948986 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.966963053 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.980844975 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.981653929 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.981688976 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.982485056 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.982495070 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.985893965 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.986242056 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.986268044 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:01.986923933 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:01.986928940 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.034364939 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.034431934 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.034477949 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.034944057 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.034965992 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.034979105 CEST	49829	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.034985065 CEST	443	49829	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.042512894 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.042566061 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.042747021 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.043313026 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.043327093 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.063152075 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.063229084 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.063576937 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.068599939 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.068627119 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.068639040 CEST	49831	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.068645000 CEST	443	49831	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.096638918 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.096714973 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.096910000 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.097354889 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.097378016 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.097393990 CEST	49832	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.097400904 CEST	443	49832	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.103589058 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.103662968 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.103759050 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.104901075 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.104943037 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.105036974 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.105163097 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.105191946 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.105207920 CEST	49830	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.105215073 CEST	443	49830	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.107336998 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.107378006 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.107551098 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.110162020 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.110213995 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.110276937 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.122196913 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.122226000 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.122556925 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.122582912 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.122818947 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.122836113 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.643601894 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.688761950 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.730046034 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.769059896 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.771004915 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.772521973 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.818696976 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:02.825725079 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.825726032 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:02.863734007 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.511378050 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.511471987 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.511873960 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.511888027 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.512172937 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.512209892 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.512628078 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.512636900 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.512970924 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.513037920 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.513360977 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.513375044 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.513591051 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.513618946 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.514224052 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.514235020 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.515455961 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.515485048 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.516113997 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.516122103 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.615871906 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.616482019 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.616585970 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.616826057 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.617219925 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.617221117 CEST	49836	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.617266893 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.617294073 CEST	443	49836	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.617887974 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.618207932 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.618870020 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.618927002 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.619031906 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.619352102 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.619352102 CEST	49835	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.619415998 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.619441986 CEST	443	49835	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.619661093 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.619682074 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.619693995 CEST	49837	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.619700909 CEST	443	49837	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.621304035 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.621488094 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.621639013 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.622210026 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.622236013 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.622404099 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.622406960 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.622462988 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.622560978 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.622674942 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.622674942 CEST	49833	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.622725010 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.622752905 CEST	443	49833	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.622984886 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.623009920 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.623207092 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.623238087 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.623343945 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.624138117 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.624206066 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.624397993 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.624432087 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.624452114 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.624460936 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.624478102 CEST	49834	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.624490976 CEST	443	49834	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.624545097 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.624701977 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.624722958 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.626427889 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.626458883 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.626895905 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.626904964 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.626924038 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.626950979 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.627055883 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.627069950 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:04.627180099 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:04.627190113 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.281430006 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.281584978 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.281608105 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.281845093 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.317606926 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.368334055 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.368352890 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.370512962 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.384233952 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.386517048 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.546469927 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.546509027 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.547497988 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.547513008 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.548377991 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.548398972 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.549038887 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.549046040 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.549921989 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.549954891 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.550425053 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.550431013 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.645101070 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.645287991 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.645328999 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.645396948 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.645401001 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.645440102 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.648744106 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.649429083 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.649497986 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.683851004 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.683873892 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.706393003 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.706406116 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.708892107 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.708966017 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.709000111 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.709018946 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.740886927 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.740914106 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.744343996 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.744365931 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.745886087 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.745893955 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.762124062 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.762151957 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.778635025 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.778711081 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.778810978 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.779314995 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.779349089 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.781735897 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.781774044 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.781830072 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.782167912 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.782181025 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.793716908 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.793762922 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.793818951 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.797565937 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.797585011 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.802536964 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.802613974 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.802670002 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.804608107 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.804626942 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.804657936 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.804665089 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.813601971 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.813642025 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.813699961 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.814119101 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.814132929 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.843425035 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.843508959 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.843559027 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.844161034 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.844187975 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.844207048 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.844217062 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.885821104 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.885879040 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:05.885953903 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.887829065 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:05.887855053 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.423192978 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.424375057 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.424411058 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.425617933 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.425622940 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.441032887 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.443913937 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.443943977 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.444847107 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.444852114 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.452153921 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.452631950 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.452663898 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.453515053 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.453521013 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.518214941 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.519293070 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.519305944 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.526905060 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.527049065 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.527122021 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.539367914 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.541965008 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.542036057 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.542088032 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.554738045 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.554755926 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.555725098 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.555742979 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.555757046 CEST	49845	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.555763960 CEST	443	49845	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.559547901 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.559613943 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.559663057 CEST	49843	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.559681892 CEST	443	49843	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.562776089 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.562808990 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.564119101 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.564125061 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.565066099 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.565215111 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.565274954 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.565371037 CEST	49844	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.565385103 CEST	443	49844	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.576188087 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.576278925 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.576354980 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.576720953 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.576761961 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.579793930 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.579857111 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.579942942 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.585589886 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.585614920 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.585686922 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.586344004 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.586371899 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.586782932 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.586811066 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.653742075 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.653816938 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.653871059 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.661580086 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.661742926 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.661799908 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.669774055 CEST	49846	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.669807911 CEST	443	49846	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.680917025 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.680968046 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.681027889 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.681979895 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.682005882 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.682898045 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.682929993 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.682949066 CEST	49847	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.682955980 CEST	443	49847	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.717516899 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.717561960 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:06.717636108 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.718044996 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:06.718061924 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.229006052 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.231049061 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.231132030 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.232290030 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.232304096 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.236340046 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.237143040 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.237207890 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.237942934 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.237956047 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.244255066 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.245491982 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.245520115 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.247380972 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.247395992 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.322227955 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.328604937 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.328773022 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.328881025 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.350202084 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.350227118 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.351228952 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.351233959 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.354029894 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.354031086 CEST	49850	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.354080915 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.354108095 CEST	443	49850	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.355453014 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.355597973 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.355660915 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.356787920 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.356822968 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.356842041 CEST	49848	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.356852055 CEST	443	49848	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.381757975 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.388865948 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.388919115 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.388993979 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.392569065 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.392600060 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.392601013 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.392601013 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.392632961 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.392651081 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.392668009 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.392693043 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.392699003 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.393457890 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.393462896 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.446846008 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.446916103 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.446976900 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.449553013 CEST	49851	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.449573994 CEST	443	49851	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.464987993 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.465030909 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.465104103 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.466341019 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.466356039 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.492012024 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.492091894 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.492142916 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.493958950 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.493972063 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.493994951 CEST	49852	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.493999958 CEST	443	49852	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.509799004 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.509838104 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.509891987 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.511166096 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:07.511177063 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.717633963 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.717708111 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:07.717792034 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.037281036 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.038099051 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.086512089 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.096864939 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.096900940 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.096937895 CEST	49849	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.096945047 CEST	443	49849	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.101104021 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.104867935 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.104867935 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.104877949 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.104895115 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.105348110 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.105355978 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.106508017 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.106513977 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.108618975 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.108658075 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.109297991 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.109297991 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.109380960 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.109400034 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.109411001 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.109576941 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.109586954 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.188766003 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.189630985 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.189656973 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.190499067 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.190502882 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.201575994 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.201646090 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.201791048 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.202132940 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.202132940 CEST	49853	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.202152967 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.202162981 CEST	443	49853	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.202970982 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.203124046 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.203313112 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.204453945 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.204457998 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.204488039 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.204493046 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.210510015 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.210531950 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.210818052 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.211108923 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.211114883 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.211322069 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.211353064 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.211966038 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.212131977 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.212160110 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.212251902 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.212522984 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.212531090 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.212537050 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.212578058 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.212620974 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.212639093 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.218497992 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.218544960 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.222703934 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.222703934 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.222774982 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.427381039 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.427479029 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.427726984 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.428841114 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.428867102 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.428894997 CEST	49856	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.428901911 CEST	443	49856	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.434504986 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.434552908 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:08.438903093 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.438903093 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:08.438939095 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.659404039 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.659583092 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.662646055 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.662693977 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.663333893 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.663341045 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.664100885 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.664105892 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.664644003 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.664648056 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.759721041 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.759908915 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.759995937 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.760343075 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.760425091 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.760483980 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.810954094 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.810971022 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.810982943 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.810982943 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.810987949 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.811000109 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.811007977 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.811011076 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.814080000 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.814122915 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.814173937 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.814214945 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.814260006 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.814302921 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.814413071 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.814434052 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:09.814466000 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:09.814505100 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.033092976 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.033680916 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.033699036 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.034233093 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.034236908 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.040267944 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.040329933 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.040873051 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.040916920 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.040946007 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.040961027 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.041399002 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.041403055 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.041562080 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.041574001 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.138674021 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.138735056 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.139015913 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.139132977 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.139151096 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.139163017 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.139167070 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.143452883 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.143531084 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.143611908 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.143775940 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.143863916 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.143896103 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.144030094 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.144332886 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.144332886 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.144332886 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.149034023 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.149072886 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.149288893 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.149410009 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.149426937 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.150386095 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.150461912 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.150532007 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.150691986 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.150691986 CEST	49860	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.150732040 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.150753975 CEST	443	49860	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.153085947 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.153100967 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.153266907 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.153388023 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.153403044 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.231295109 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.231925011 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.231947899 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.232419014 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.232423067 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.235702038 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.236181021 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.236239910 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.236603022 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.236617088 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.336548090 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.336641073 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.336730957 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.337044001 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.337065935 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.337080956 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.337088108 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.339452982 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.339484930 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.339591026 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.339663982 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.340121031 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.340121984 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.340212107 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.340389967 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.340424061 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.340504885 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.344685078 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.344727039 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.344801903 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.346440077 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.346473932 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.346554041 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.346751928 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.346771002 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.347142935 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.347157001 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.446578979 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.446609974 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.787276983 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.788037062 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.788063049 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.788574934 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.788579941 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.801506996 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.802757978 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.802788019 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.803234100 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.803241968 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.810745955 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.811125040 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.811151028 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.811532021 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.811539888 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.890918016 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.890981913 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.891174078 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.891309023 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.891326904 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.891355038 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.891361952 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.894514084 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.894555092 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.896797895 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.896856070 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.896872997 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.901587009 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.901612997 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.901695967 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.901714087 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.901956081 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.901956081 CEST	49866	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.901967049 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.901994944 CEST	443	49866	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.904793978 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.904807091 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.904982090 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.905033112 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.905036926 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.912578106 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.912643909 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.913022041 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.913022041 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.913146019 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.913170099 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.915920019 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.915958881 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.916162014 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.916238070 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.916244984 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.996289968 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.997417927 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.997417927 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.997443914 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.997454882 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.998591900 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.999409914 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.999409914 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:11.999450922 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:11.999465942 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.098773956 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.098802090 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.099009037 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.099037886 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.099107981 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.099586964 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.099586964 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.099615097 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.099642992 CEST	49868	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.099652052 CEST	443	49868	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.102447033 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.102484941 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.102631092 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.102797985 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.102809906 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.102879047 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.102902889 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.102960110 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.102991104 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.103156090 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.103156090 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.103632927 CEST	49867	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.103642941 CEST	443	49867	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.105643988 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.105685949 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.105876923 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.105992079 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.106007099 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.547878981 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.548998117 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.549036026 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.549148083 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.549160004 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.553684950 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.554593086 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.554593086 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.554603100 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.554616928 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.656429052 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.657087088 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.657196999 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.657196999 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.657342911 CEST	49870	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.657363892 CEST	443	49870	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.660329103 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.660378933 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.660535097 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.660747051 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.660773039 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.661921978 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.662415981 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.662498951 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.662549019 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.662549019 CEST	49869	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.662564993 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.662574053 CEST	443	49869	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.664901018 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.664975882 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.665138006 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.665291071 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.665324926 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.709157944 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.710278988 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.710356951 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.710839033 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.710853100 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.781092882 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.781697989 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.781738043 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.786523104 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.786541939 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.793555021 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.794154882 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.794195890 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.798505068 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.798526049 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.814832926 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.814888954 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.819010973 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.820791960 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.820827007 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.820880890 CEST	49871	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.820895910 CEST	443	49871	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.832281113 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.832361937 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.832597017 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.832838058 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.832869053 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.885397911 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.885479927 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.885545015 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.886043072 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.886068106 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.886082888 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.886090994 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.892328978 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.892384052 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.892452955 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.892986059 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.893002987 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.900341034 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.900649071 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.900712013 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.901138067 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.901160002 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.901174068 CEST	49873	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.901180029 CEST	443	49873	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.907814980 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.907850981 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:12.907989979 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.908595085 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:12.908612967 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.307559967 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.308099031 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.308140993 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.308605909 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.308612108 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.324246883 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.324671984 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.324708939 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.325146914 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.325154066 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.411101103 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.411381006 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.411537886 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.413439989 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.413465023 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.413480043 CEST	49875	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.413485050 CEST	443	49875	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.418560982 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.418663025 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.418771982 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.418967962 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.418991089 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.435420036 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.436036110 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.436090946 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.436132908 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.436132908 CEST	49874	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.436151981 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.436161041 CEST	443	49874	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.438405037 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.438447952 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.438608885 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.438965082 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.438981056 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.465485096 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.466053963 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.466083050 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.466531992 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.466537952 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.540215015 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.540795088 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.540816069 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.541287899 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.541292906 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.562356949 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.562877893 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.562907934 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.563354015 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.563359976 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.566946983 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.567006111 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.567059040 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.567640066 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.567662954 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.567678928 CEST	49876	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.567687988 CEST	443	49876	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.570947886 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.571044922 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.571186066 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.571372032 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.571391106 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.672329903 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.673039913 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.673136950 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.673182011 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.673202991 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.673218012 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.673224926 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.677242041 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.677288055 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.677366972 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.677572966 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.677583933 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.939136982 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.939230919 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.939357996 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.943459034 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.943484068 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.943494081 CEST	49877	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.943500042 CEST	443	49877	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.947544098 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.947583914 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:13.947640896 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.947814941 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:13.947832108 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.056252956 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.058309078 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.058381081 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.059482098 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.059497118 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.076560020 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.077426910 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.077470064 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.078408003 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.078429937 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.155738115 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.155760050 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.155813932 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.155853033 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.155894995 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.156553984 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.156568050 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.156601906 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.156608105 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.164758921 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.164805889 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.164871931 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.165286064 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.165299892 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.176419973 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.176495075 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.176649094 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.178755045 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.178776026 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.178834915 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.178841114 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.184643984 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.184688091 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.184778929 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.185168028 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.185180902 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.263694048 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.303519011 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.312000036 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.312024117 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:14.313328028 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:14.313335896 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.369719982 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.370265961 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.370300055 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.371319056 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.371325970 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.478669882 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.479105949 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.479211092 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.524449110 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.525084019 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.525149107 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.525242090 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.525283098 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.528390884 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.528422117 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.530272007 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.530282974 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.548139095 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.548264027 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.548350096 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.557967901 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.561148882 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.568634033 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.598514080 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.614070892 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.614289999 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.629374981 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.629400969 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.633965015 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.633982897 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.637300968 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.637372971 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.641625881 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.641645908 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.649714947 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.649729967 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.653657913 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.653681993 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.657814026 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.657835960 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.736550093 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.736628056 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.736764908 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.741734982 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.741785049 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.741862059 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.744837046 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.745131016 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.745177984 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.745206118 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.745266914 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.746190071 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.746213913 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.746227980 CEST	49884	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.746232986 CEST	443	49884	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.754853964 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.755297899 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.756597996 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.763813972 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.763837099 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.763870955 CEST	49883	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.763876915 CEST	443	49883	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.821904898 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.821933031 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.822134972 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.822134972 CEST	49885	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.822200060 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.822272062 CEST	443	49885	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.838140965 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.838182926 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.838418007 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.838576078 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.838592052 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.840323925 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.840383053 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.840466976 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.841221094 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.841254950 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.842314005 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.842353106 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.842425108 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.842536926 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:15.842561960 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:15.948019028 CEST	49891	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:15.948086023 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:15.948169947 CEST	49891	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:15.949059963 CEST	49891	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:15.949078083 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:16.308161974 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:16.309025049 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:16.309052944 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:16.309783936 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:16.309788942 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:16.426469088 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:16.426558018 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:16.426722050 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:16.427258968 CEST	49886	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:16.427283049 CEST	443	49886	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:16.436347008 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:16.436395884 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:16.436475992 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:16.436721087 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:16.436737061 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.515463114 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:17.520100117 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.521291971 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.521423101 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.521518946 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.562022924 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:17.562067986 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:17.562165022 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:17.563685894 CEST	49891	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:17.563714027 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:17.564260006 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:17.564482927 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.564491034 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.564491034 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.564496994 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.592200994 CEST	49891	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:17.592303038 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:17.597208977 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:17.597248077 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:17.597311974 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:17.597528934 CEST	49891	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:17.597601891 CEST	49891	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:17.597609043 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:17.598128080 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:17.598145962 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:17.598531008 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:17.598546028 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:17.666940928 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.666954994 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.667798042 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.667804956 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.668334961 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.668339968 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.669593096 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.669596910 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.670851946 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.670882940 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.671736002 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.671742916 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.671834946 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.671840906 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.672451019 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.672457933 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.707458973 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.708240986 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.708265066 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.710376978 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.710381031 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.763827085 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.763952017 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.764014959 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.766494989 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.766730070 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.766830921 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.768366098 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.768445969 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.768505096 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.771689892 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.772063971 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.772108078 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.772120953 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.772157907 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.774259090 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:17.774270058 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:17.774333954 CEST	49891	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:17.774360895 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:17.774398088 CEST	49891	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:17.774410963 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:17.774455070 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:17.774488926 CEST	49891	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:17.774964094 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.774985075 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.774996996 CEST	49887	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.775002003 CEST	443	49887	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.776550055 CEST	49891	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:17.776576996 CEST	443	49891	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:17.779442072 CEST	49889	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.779459000 CEST	443	49889	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.783143044 CEST	49888	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.783153057 CEST	443	49888	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.785027027 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.785033941 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.785048008 CEST	49890	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.785054922 CEST	443	49890	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.791799068 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.791831017 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.791975975 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.793375969 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.793390036 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.796448946 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.796492100 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.796730995 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.798851013 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.798883915 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.798944950 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.799400091 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.799422026 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.807038069 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.807356119 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.807410955 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.807423115 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.807517052 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.807688951 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.807703972 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.807782888 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.808829069 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.808841944 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.809659958 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.809668064 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.809679985 CEST	49892	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.809685946 CEST	443	49892	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.814308882 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.814321995 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.816299915 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.816329002 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:17.816415071 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.816817045 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:17.816827059 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.271317959 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:18.289146900 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:18.306792974 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:18.306827068 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:18.308062077 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:18.308142900 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:18.310429096 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:18.310442924 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:18.311702013 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:18.311800957 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:18.319171906 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:18.319329977 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:18.319948912 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:18.320086956 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:18.320575953 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:18.320591927 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:18.364579916 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:18.364579916 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:18.364617109 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:18.411370039 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:18.443645000 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.446221113 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.446258068 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.446954012 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.446964979 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.457809925 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.458091021 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.458645105 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.458678961 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.461652040 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.461672068 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.462810993 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.462902069 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.462928057 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.463583946 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.463591099 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.464238882 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.464251041 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.464890003 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.464895010 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.495292902 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.497025013 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.497060061 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.497946978 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.497952938 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.544527054 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.544962883 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.545078993 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.550595045 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.550618887 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.550628901 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.550636053 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.562293053 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.563514948 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.563587904 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.564183950 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.564204931 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.564434052 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.564441919 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.565520048 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.565550089 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.565608025 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.565617085 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.565676928 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.565861940 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.565924883 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.567080975 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.567096949 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.567109108 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.567114115 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.568336964 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.568341970 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.568352938 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.568356037 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.575457096 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.575500011 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.575747013 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.578844070 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.578892946 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.579029083 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.579274893 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.579288960 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.580111980 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.580121994 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.580225945 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.580504894 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.580516100 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.580670118 CEST	443	49808	23.1.237.91	192.168.2.5
Oct 4, 2024 16:45:18.580737114 CEST	49808	443	192.168.2.5	23.1.237.91
Oct 4, 2024 16:45:18.581347942 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.581355095 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.582530975 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.582578897 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.582698107 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.582839966 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.582864046 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.606590986 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.606664896 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.606808901 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.607331991 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.607353926 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.607393026 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.607399940 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.611458063 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.611505032 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:18.611654997 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.612122059 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:18.612133980 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.229366064 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.230030060 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.230060101 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.230525970 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.230530024 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.238320112 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.238769054 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.238781929 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.239285946 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.239289999 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.269692898 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.270235062 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.270272970 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.270875931 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.270881891 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.294097900 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.294692993 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.294709921 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.294718027 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.295212030 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.295217037 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.295253038 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.295286894 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.295768023 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.295778036 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.352675915 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.353111982 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.353178024 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.353225946 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.353225946 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.353243113 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.353250980 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.355056047 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.355361938 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.355407953 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.355516911 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.355520964 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.355531931 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.355536938 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.357343912 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.357412100 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.357477903 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.357822895 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.357837915 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.358692884 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.358702898 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.358769894 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.358971119 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.358978033 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.379333973 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.379365921 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.379420996 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.379455090 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.379492998 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.380000114 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.380028009 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.380069017 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.380076885 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.398765087 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.398818016 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.398893118 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.400054932 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.400072098 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.405985117 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.407279968 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.407346010 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.407393932 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.407445908 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.407489061 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.407552004 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.407552004 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.407588959 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.407598972 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.412622929 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.412642002 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.412655115 CEST	49904	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.412661076 CEST	443	49904	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.430114985 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.430162907 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.430252075 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.431735039 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.431754112 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.436141014 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.436176062 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.436230898 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.436495066 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:19.436516047 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:19.727274895 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.727298021 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.727308035 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.727340937 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.727360010 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.727382898 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.727402925 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.776402950 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.776432037 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.784574986 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.784584999 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.784606934 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.784640074 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.784658909 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.784683943 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.816767931 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.816776991 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.816839933 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.816864014 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.818135023 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.818142891 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.818176985 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.818192005 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.818202972 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.818228960 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.819072962 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.819081068 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.819130898 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.819139957 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.870214939 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.885752916 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.885766983 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.885831118 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.885854006 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.885910988 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.885917902 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.886225939 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.886234045 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.886260986 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.886277914 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.886286974 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.886301994 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.907572985 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.907582998 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.907655954 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.907669067 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.908294916 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.908302069 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.908339977 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.908359051 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.908366919 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.908380985 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.908449888 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:19.914522886 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.998666048 CEST	49893	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:19.998687983 CEST	443	49893	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:20.006545067 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:20.021924019 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:20.052285910 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.062982082 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.088745117 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:20.100291967 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:20.111270905 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:20.132432938 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.148427963 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.165033102 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.925081968 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.925092936 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.925111055 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:20.925112963 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:20.926033020 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.926039934 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:20.927340031 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.927345991 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:20.928211927 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.928289890 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:20.929037094 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.929049015 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:20.929230928 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.929244995 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:20.929593086 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:20.929598093 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.031240940 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.031326056 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.031378031 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.032331944 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.033181906 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.033363104 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.035212994 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.035237074 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.035276890 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.035324097 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.035324097 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.035887003 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.036070108 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.036128044 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.077740908 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.077766895 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.078425884 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.078430891 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.078599930 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.078599930 CEST	49906	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.078635931 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.078645945 CEST	443	49906	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.078850985 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.078866005 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.078879118 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.078883886 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.084583998 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.084623098 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.084686041 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.084928036 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.084943056 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.088022947 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:21.092269897 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.092289925 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.092295885 CEST	49909	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.092300892 CEST	443	49909	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.092480898 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.092494011 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.092632055 CEST	49905	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.092637062 CEST	443	49905	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.095523119 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.095530033 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.095594883 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.095940113 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.095977068 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.096028090 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.097244978 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.097255945 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.097395897 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.097410917 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.099109888 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.099119902 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.099169016 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.099332094 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.099344969 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.135411978 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:21.175632954 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.175712109 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.175765038 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.176244974 CEST	49908	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.176264048 CEST	443	49908	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.182426929 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.182471991 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.182545900 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.182816982 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.182831049 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.241636038 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:21.241672039 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:21.241679907 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:21.241738081 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:21.241745949 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:21.241805077 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:21.241832018 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:21.281490088 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:21.298975945 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:21.298988104 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:21.299061060 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:21.299072981 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:21.299124956 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:21.299135923 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:21.299181938 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:21.299226046 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:21.363181114 CEST	49894	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:21.363217115 CEST	443	49894	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:21.384851933 CEST	49916	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.384891987 CEST	443	49916	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.384944916 CEST	49916	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.385174036 CEST	49916	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.385186911 CEST	443	49916	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.448301077 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.448396921 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.448477983 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.448687077 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.448719025 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.457705021 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.457712889 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.457765102 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.458260059 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.458268881 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.721030951 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.721957922 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.721971989 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.722930908 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.722935915 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.739309072 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.739876986 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.739893913 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.740370035 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.740374088 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.741420031 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.741852045 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.741930008 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.742244005 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.742259026 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.770806074 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.771502018 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.771514893 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.772167921 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.772171974 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.821423054 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.821568966 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.821624994 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.821849108 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.821867943 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.821878910 CEST	49910	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.821885109 CEST	443	49910	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.826144934 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.826225996 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.826313972 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.826656103 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.826688051 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.837686062 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.838910103 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.838949919 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.839117050 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.839210987 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.839252949 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.839283943 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.839437962 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.839618921 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.839632034 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.839915037 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.839931965 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.839962006 CEST	49912	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.839968920 CEST	443	49912	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.840272903 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.840470076 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.842616081 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.842617035 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.842668056 CEST	49914	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.842688084 CEST	443	49914	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.842724085 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.842751026 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.844798088 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.844857931 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.844857931 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.844870090 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.844881058 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.845053911 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.845053911 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.845072985 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.874958992 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.875015020 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.875070095 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.875200987 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.875248909 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.875248909 CEST	49913	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.875256062 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.875263929 CEST	443	49913	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.877486944 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.877499104 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.877640009 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.877778053 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.877789974 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.937387943 CEST	443	49916	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.937967062 CEST	49916	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.937989950 CEST	443	49916	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.938802958 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.938910961 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.938960075 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.938986063 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.939057112 CEST	443	49916	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.939062119 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.939122915 CEST	49916	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.939138889 CEST	443	49916	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.939378977 CEST	49916	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.939743996 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.939743996 CEST	49915	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.939759016 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.939770937 CEST	443	49915	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.943006039 CEST	49916	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.943097115 CEST	443	49916	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.943510056 CEST	49916	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.943521023 CEST	443	49916	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.943569899 CEST	49916	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:21.969016075 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.969042063 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.969552994 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.970057964 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:21.970068932 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:21.987395048 CEST	443	49916	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:21.988519907 CEST	49916	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.001962900 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.002345085 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.002413034 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.003443956 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.003679037 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.003704071 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.005508900 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.005508900 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.005584955 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.008785009 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.021385908 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.021707058 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.021733046 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.025348902 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.025434971 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.025445938 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.025610924 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.025893927 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.026061058 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.026065111 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.026065111 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.026220083 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.051403999 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.097688913 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.097713947 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.097752094 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.097776890 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.110069036 CEST	443	49916	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.110160112 CEST	443	49916	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.112739086 CEST	49916	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.113733053 CEST	49916	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.113756895 CEST	443	49916	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.126982927 CEST	49925	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.127016068 CEST	443	49925	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.127104044 CEST	49925	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.127372980 CEST	49925	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.127393007 CEST	443	49925	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.153217077 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:22.153244019 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:22.153361082 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:22.153621912 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:22.153635979 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:22.183311939 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.183366060 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.183425903 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.183449030 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.183470964 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.183485031 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.183696985 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.185359955 CEST	49917	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.185384989 CEST	443	49917	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.187786102 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.187814951 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.188179970 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.188179970 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.188234091 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.205029964 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.205064058 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.205239058 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.205265045 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.205359936 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.206551075 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.206562042 CEST	443	49919	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.206610918 CEST	49919	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.466717958 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.467276096 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.467312098 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.467787981 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.467793941 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.480992079 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.481353998 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.481394053 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.481767893 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.481774092 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.530481100 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.531035900 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.531052113 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.531517029 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.531523943 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.560075045 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.561079979 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.561079979 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.561105013 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.561117887 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.566320896 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.566553116 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.566699982 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.566764116 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.566764116 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.566780090 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.566792011 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.569700003 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.569741964 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.569981098 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.569981098 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.570010900 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.582217932 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.582266092 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.582462072 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.582462072 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.582492113 CEST	49922	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.582509995 CEST	443	49922	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.584779024 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.584870100 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.585172892 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.585172892 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.585247040 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.635204077 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.635232925 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.635279894 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.635341883 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.635390997 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.635627985 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.635648966 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.635689974 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.635708094 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.637515068 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.637516022 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.637566090 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.637590885 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.639508009 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.639549971 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.640161037 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.640366077 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.640382051 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.665189028 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.665373087 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.665425062 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.665575981 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.665606976 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.665607929 CEST	49923	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.665623903 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.665636063 CEST	443	49923	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.669083118 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.669121027 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.669377089 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.669377089 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.669409037 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.688122988 CEST	443	49925	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.688493967 CEST	49925	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.688518047 CEST	443	49925	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.689568996 CEST	443	49925	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.690634966 CEST	49925	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.690642118 CEST	443	49925	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.690840006 CEST	49925	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.690840006 CEST	49925	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.690987110 CEST	49925	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.691050053 CEST	443	49925	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.738363028 CEST	49925	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.738383055 CEST	443	49925	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.746624947 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.746941090 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.747070074 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.747070074 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.747136116 CEST	49924	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.747163057 CEST	443	49924	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.750062943 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.750094891 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.750430107 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.750457048 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:22.750467062 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:22.759196043 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.759535074 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.759562016 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.759917021 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.760293961 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.760356903 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.760515928 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.785782099 CEST	49925	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.800792933 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.800805092 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.843657017 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:22.843945980 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:22.843965054 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:22.845191956 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:22.845268011 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:22.845690966 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:22.845762968 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:22.845870018 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:22.857789040 CEST	443	49925	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.859428883 CEST	443	49925	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.859553099 CEST	49925	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.860486031 CEST	49925	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.860507011 CEST	443	49925	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.887444973 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:22.894541025 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:22.894579887 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:22.922722101 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.922761917 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.922822952 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.922832966 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.922926903 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.922938108 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.923012972 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.923062086 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.924387932 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.924398899 CEST	443	49927	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:22.924407005 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:22.924443960 CEST	49927	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:23.073153019 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:23.073168039 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:23.073283911 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:23.073348999 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:23.137940884 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:23.137953997 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:23.137986898 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:23.138040066 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:23.138056040 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:23.138098955 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:23.138103962 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:23.138140917 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:23.138194084 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:23.187041998 CEST	49926	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:23.187069893 CEST	443	49926	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:23.223254919 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.264866114 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.269566059 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.286221027 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.331608057 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.332063913 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.394556046 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.394670963 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.395556927 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.395567894 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.396141052 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.396146059 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.396436930 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.396441936 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.396995068 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.397000074 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.397275925 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.397300959 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.397650957 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.397663116 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.397763014 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.397773981 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.398076057 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.398086071 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.400844097 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.401125908 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.401141882 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.401576996 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.401582003 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.493163109 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.493257999 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.493386984 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.493571043 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.493591070 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.493640900 CEST	49931	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.493645906 CEST	443	49931	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.493976116 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.494188070 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.494236946 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.494303942 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.494307995 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.494316101 CEST	49928	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.494321108 CEST	443	49928	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.494365931 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.494957924 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.494997978 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.495029926 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.495078087 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.495155096 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.495193958 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.495220900 CEST	49930	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.495237112 CEST	443	49930	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.496474981 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.496541023 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.496598005 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.496994019 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.497010946 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.497034073 CEST	49929	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.497045040 CEST	443	49929	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.498141050 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.498169899 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.498402119 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.498615980 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.498622894 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.498687983 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.499021053 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.499032021 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.499213934 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.499224901 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.499269962 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.499568939 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.499603033 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.499666929 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.499847889 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.499892950 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.499892950 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.499910116 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.499921083 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.499960899 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.500026941 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.500056028 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.500062943 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.500072002 CEST	49932	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.500076056 CEST	443	49932	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.500818968 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.500854969 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.500900984 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.501058102 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.501071930 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.502046108 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.502110004 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:23.502182007 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.502330065 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:23.502362013 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.145220995 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.145850897 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.145993948 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.146017075 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.146507978 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.146517992 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.146523952 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.146527052 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.147128105 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.147135019 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.165829897 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.166347980 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.166368008 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.166923046 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.166930914 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.196818113 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.198267937 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.198291063 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.199883938 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.199897051 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.260302067 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.260358095 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.260476112 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.260696888 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.260739088 CEST	49933	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.260751009 CEST	443	49933	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.260833979 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.260894060 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.262232065 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.262250900 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.262280941 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.262295008 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.265168905 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.265250921 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.266119003 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.266314030 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.266346931 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.266398907 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.266526937 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.266561031 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.266726017 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.266741037 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.284812927 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.284873009 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.285130978 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.285378933 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.285387993 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.285401106 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.285406113 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.290402889 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.290448904 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.290529013 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.290796995 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.290813923 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.314620018 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.314714909 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.314815044 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.314816952 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.314870119 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.315167904 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.315185070 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.315193892 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.315200090 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.320300102 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.320339918 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.320508003 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.320825100 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.320839882 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.940634012 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.941529036 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.941590071 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.942569017 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.942581892 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.947051048 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.947720051 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.947782993 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.948362112 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.948371887 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.959748030 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.960830927 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.960870981 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.961518049 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.961532116 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.979587078 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.980318069 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.980377913 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:24.981012106 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:24.981015921 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.044446945 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.044482946 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.044538021 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.044615984 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.045591116 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.045636892 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.045665979 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.045682907 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.053354025 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.053504944 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.053633928 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.055100918 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.055129051 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.055139065 CEST	49939	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.055145025 CEST	443	49939	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.062886953 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.062959909 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.063035011 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.064096928 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.064133883 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.066562891 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.066658974 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.066751957 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.067060947 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.067100048 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.067539930 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.067727089 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.067800999 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.068016052 CEST	49940	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.068036079 CEST	443	49940	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.071397066 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.071424961 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.071597099 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.072072029 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.072086096 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.079618931 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.079685926 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.079859018 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.080111980 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.080123901 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.080135107 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.080138922 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.108232021 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.108326912 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.108431101 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.109302044 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.109322071 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.718781948 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.719861031 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.719886065 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.720544100 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.720549107 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.721575975 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.722043037 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.722078085 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.722882032 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.722889900 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.766465902 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.767129898 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.767158985 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.767632008 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.767771959 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.767777920 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.768106937 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.768125057 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.768673897 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.768677950 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.820306063 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.820384026 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.820769072 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.820889950 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.820907116 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.820920944 CEST	49942	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.820926905 CEST	443	49942	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.822525978 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.822746992 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.822808981 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.823622942 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.823652983 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.823662043 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.823668003 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.831618071 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.831666946 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.831789970 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.832253933 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.832267046 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.835601091 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.835630894 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.835719109 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.835936069 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.835952044 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.872169018 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.872560024 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.872711897 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.873754978 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.873775005 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.874260902 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.874727011 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.874787092 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.879224062 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.879242897 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.885952950 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.886029005 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.886113882 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.887639999 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.887684107 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.887763977 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.887926102 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.887957096 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:25.888088942 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:25.888103962 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.489515066 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.490896940 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.490912914 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.491121054 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.491945028 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.491950989 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.492563009 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.492580891 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.493544102 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.493549109 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.526160002 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.526932955 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.526958942 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.527781010 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.527786970 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.554086924 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.554517984 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.554538012 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.555252075 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.555257082 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.581479073 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.582066059 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.582091093 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.583008051 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.583014011 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.589359999 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.589411020 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.589477062 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.589488029 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.589533091 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.589910984 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.589932919 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.589951038 CEST	49946	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.589956045 CEST	443	49946	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.591028929 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.591257095 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.591505051 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.591614962 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.591626883 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.591674089 CEST	49947	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.591681004 CEST	443	49947	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.599240065 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.599273920 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.599368095 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.600601912 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.600621939 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.601284981 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.601325035 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.601396084 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.601655960 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.601670980 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.629295111 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.629352093 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.629430056 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.630381107 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.630397081 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.637795925 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.637885094 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.637980938 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.638361931 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.638397932 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.654913902 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.654989958 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.655281067 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.655466080 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.655466080 CEST	49948	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.655504942 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.655534029 CEST	443	49948	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.661734104 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.661777020 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.661854029 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.662127018 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.662146091 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.689866066 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.689933062 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.690057993 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.690407991 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.690421104 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.690442085 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.690447092 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.698761940 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.698782921 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:26.698843002 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.699085951 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:26.699099064 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.309437037 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.312540054 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.312577009 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.317070007 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.324027061 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.324033976 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.331693888 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.331732035 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.332495928 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.332506895 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.355480909 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.360985994 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.376305103 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.384035110 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.384066105 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.384679079 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.384686947 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.410778999 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.417625904 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.417648077 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.426398039 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.429553986 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.429590940 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.429636002 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.429642916 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.429888964 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.431687117 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.431732893 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.431791067 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.431823015 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.431843996 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.431853056 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.431860924 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.431894064 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.433092117 CEST	49951	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.433111906 CEST	443	49951	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.443815947 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.443839073 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.445482969 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.445491076 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.446307898 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.446325064 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.452207088 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.452245951 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.452310085 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.453015089 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.453025103 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.455961943 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.455987930 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.456279993 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.456631899 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.456643105 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.482656956 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.482724905 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.482827902 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.546904087 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.546933889 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.546987057 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.547014952 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.547058105 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.549510956 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.549547911 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.549562931 CEST	49953	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.549570084 CEST	443	49953	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.549958944 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.549990892 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.550039053 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.550040960 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.550112009 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.551312923 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.551312923 CEST	49954	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.551330090 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.551337004 CEST	443	49954	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.569457054 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.569478035 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.569493055 CEST	49952	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.569498062 CEST	443	49952	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.582650900 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.582695961 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.582942009 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.583878040 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.583888054 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.583961964 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.585547924 CEST	49959	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.585586071 CEST	443	49959	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.585685015 CEST	49959	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.587233067 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.587255955 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.587796926 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.587805986 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:27.588308096 CEST	49959	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:27.588320971 CEST	443	49959	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.131427050 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.132540941 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.132603884 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.133780003 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.133794069 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.152506113 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.153151035 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.153177023 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.153954029 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.153959990 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.238806963 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.238899946 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.239159107 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.239527941 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.239568949 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.239598989 CEST	49955	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.239614964 CEST	443	49955	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.244168997 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.244232893 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.244299889 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.244627953 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.244647980 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.270941019 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.270998955 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.271122932 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.271186113 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.271558046 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.271581888 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.271595955 CEST	49956	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.271604061 CEST	443	49956	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.276614904 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.276658058 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.276916027 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.277050018 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.277069092 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.278142929 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.278695107 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.278718948 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.279633999 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.279639959 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.313786030 CEST	443	49959	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.314306021 CEST	49959	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.314332962 CEST	443	49959	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.314939976 CEST	49959	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.314945936 CEST	443	49959	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.360032082 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.360651970 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.360678911 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.361203909 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.361210108 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.401943922 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.402009964 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.402127028 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.402236938 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.402338982 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.402369976 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.402390957 CEST	49958	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.402396917 CEST	443	49958	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.405678034 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.405767918 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.405860901 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.406044006 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.406091928 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.432563066 CEST	443	49959	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.432795048 CEST	443	49959	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.432841063 CEST	443	49959	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.432849884 CEST	49959	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.432904005 CEST	49959	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.432980061 CEST	49959	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.432998896 CEST	443	49959	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.433010101 CEST	49959	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.433015108 CEST	443	49959	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.435971975 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.436017036 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.436084032 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.436239004 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.436254978 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.498492002 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.499376059 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.499476910 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.499522924 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.499538898 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.499550104 CEST	49957	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.499556065 CEST	443	49957	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.502690077 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.502724886 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.502901077 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.503092051 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.503107071 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.956898928 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.958417892 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.958441973 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.959671974 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.959678888 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.970283985 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.971086979 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.971106052 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:28.972088099 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:28.972095013 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.074773073 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.074975967 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.075084925 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.075309038 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.075309038 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.075360060 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.075388908 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.079437017 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.079488993 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.079695940 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.079860926 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.079874039 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.083700895 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.100965977 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.100984097 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.101555109 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.101582050 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.112864017 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.113045931 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.113121986 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.113168001 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.113189936 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.113200903 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.113205910 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.132191896 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.174060106 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.174084902 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.174536943 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.174542904 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.176202059 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.176248074 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.176321983 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.179846048 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.179888010 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.185067892 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.185661077 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.185677052 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.186319113 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.186323881 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.201487064 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.201766014 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.201827049 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.201929092 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.201998949 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.237431049 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.237472057 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.237493038 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.237502098 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.243866920 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.243916988 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.244002104 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.244498968 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.244518995 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.279266119 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.279336929 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.279592037 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.279752016 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.279772997 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.279784918 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.279791117 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.283868074 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.283901930 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.284045935 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.284200907 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.284214973 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.292845964 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.292876959 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.292922974 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.292974949 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.293102980 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.293117046 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.296407938 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.296483994 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.296578884 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.296787977 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.296807051 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.753597021 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.770425081 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.770440102 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.771254063 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.771258116 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.841687918 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.842377901 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.842398882 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.843059063 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.843064070 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.875715017 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.875879049 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.875951052 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.894155025 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.894175053 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.894187927 CEST	49965	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.894193888 CEST	443	49965	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.908442020 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.929692030 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.929706097 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.930221081 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.930224895 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.932017088 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.932059050 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.932130098 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.932274103 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.932284117 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.953021049 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.953579903 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.953596115 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.954854012 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.954862118 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.988049984 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.988089085 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.988147974 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.988158941 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.988203049 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.988760948 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.988780975 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.988792896 CEST	49966	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.988800049 CEST	443	49966	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.994606018 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.994647980 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.994708061 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.995146990 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.995161057 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.997607946 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.998328924 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.998356104 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:29.999049902 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:29.999057055 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.034053087 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.034133911 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.034192085 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.034539938 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.034564018 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.034596920 CEST	49967	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.034604073 CEST	443	49967	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.040594101 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.040644884 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.040708065 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.041083097 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.041098118 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.056037903 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.056310892 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.056364059 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.056612968 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.056637049 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.056648016 CEST	49968	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.056653976 CEST	443	49968	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.061913013 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.061961889 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.062053919 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.062494040 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.062506914 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.103997946 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.104064941 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.104125977 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.104367018 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.104382992 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.104393005 CEST	49969	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.104398012 CEST	443	49969	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.107767105 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.107794046 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.107880116 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.108057022 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.108082056 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.617238998 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.672030926 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.702768087 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.702792883 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.703310966 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.703318119 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.708820105 CEST	49975	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:30.708872080 CEST	443	49975	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:30.708949089 CEST	49975	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:30.709851027 CEST	49975	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:30.709866047 CEST	443	49975	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:30.712948084 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.713618040 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.713654995 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.714387894 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.714392900 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.727710962 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.730365992 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.730396032 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.731304884 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.731313944 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.749862909 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.750586987 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.750622034 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.751326084 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.751336098 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.800872087 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.801464081 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.801531076 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.802200079 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.802222967 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.802237034 CEST	49970	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.802244902 CEST	443	49970	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.812709093 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.812746048 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.812813044 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.813287973 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.813302040 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.814956903 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.815021992 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.815080881 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.815109015 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.815129995 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.815172911 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.815520048 CEST	49972	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.815540075 CEST	443	49972	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.822669983 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.822715044 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.822772980 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.823215961 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.823232889 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.830908060 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.831248999 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.831302881 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.834713936 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.834742069 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.834758997 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.834764957 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.841130972 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.841144085 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.841202974 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.841752052 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.841763020 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.867953062 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.868027925 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.868148088 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.868151903 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.868263960 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.868573904 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.868588924 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.868617058 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.868623018 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.874538898 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.874581099 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:30.878763914 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.878933907 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:30.878950119 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.274880886 CEST	443	49975	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:31.275288105 CEST	49975	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:31.275310993 CEST	443	49975	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:31.275692940 CEST	443	49975	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:31.277256012 CEST	49975	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:31.277318001 CEST	443	49975	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:31.277470112 CEST	49975	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:31.319411993 CEST	443	49975	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:31.457670927 CEST	443	49975	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:31.457760096 CEST	443	49975	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:31.457761049 CEST	49975	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:31.458492994 CEST	49975	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:31.461220026 CEST	49975	443	192.168.2.5	52.108.8.12
Oct 4, 2024 16:45:31.461241007 CEST	443	49975	52.108.8.12	192.168.2.5
Oct 4, 2024 16:45:31.491282940 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.492357969 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.492357969 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.492383003 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.492393970 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.498248100 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.499106884 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.499106884 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.499146938 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.499160051 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.540330887 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.541215897 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.541215897 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.541234016 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.541251898 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.561300039 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.562141895 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.562141895 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.562171936 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.562191963 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.605811119 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.606883049 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.606992006 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.606992006 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.607135057 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.607192993 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.607192993 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.607213974 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.607223034 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.610356092 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.610411882 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.610675097 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.610675097 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.610723019 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.615714073 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.615919113 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.616040945 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.616184950 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.616184950 CEST	49976	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.616203070 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.616214037 CEST	443	49976	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.618948936 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.618988991 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.619132996 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.619263887 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.619280100 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.658942938 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.659038067 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.659115076 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.660221100 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.660243034 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.660825014 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.660831928 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.664870977 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.664925098 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.665047884 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.666548967 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.666568041 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.678359985 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.678423882 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.678522110 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.678581953 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.678750992 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.678782940 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.678782940 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.678803921 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.678814888 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.681979895 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.682034016 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:31.682450056 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.682712078 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:31.682732105 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.266783953 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.267466068 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.267501116 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.267951012 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.267959118 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.310580969 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.311157942 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.311222076 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.311762094 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.311775923 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.354754925 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.355325937 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.355350971 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.355856895 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.355863094 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.360433102 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.360888004 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.360929966 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.361396074 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.361407042 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.422723055 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.422748089 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.422806025 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.422827959 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.422873020 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.423144102 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.423187971 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.423217058 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.423232079 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.426542997 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.426603079 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.426676035 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.426902056 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.426917076 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.436434984 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.436593056 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.436669111 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.436713934 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.436737061 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.436754942 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.436763048 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.439246893 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.439286947 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.439356089 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.439543962 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.439549923 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.470134974 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.470175982 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.470225096 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.470232964 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.470280886 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.470612049 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.470633984 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.470654011 CEST	49983	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.470662117 CEST	443	49983	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.473870993 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.473896980 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.473978043 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.474136114 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.474147081 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.476553917 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.476574898 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.476630926 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.476653099 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.476711988 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.476906061 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.476907015 CEST	49982	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.476948023 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.476974010 CEST	443	49982	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.479790926 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.479835033 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.479938984 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.480139971 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:32.480160952 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:32.711555958 CEST	49988	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:32.711599112 CEST	443	49988	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:32.711826086 CEST	49988	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:32.713025093 CEST	49988	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:32.713038921 CEST	443	49988	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:33.102622986 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.103188038 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.103209019 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.103704929 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.103709936 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.127929926 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.128470898 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.128485918 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.128967047 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.128972054 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.129688978 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.130017042 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.130045891 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.130409002 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.130417109 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.152565002 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.152997971 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.153033972 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.153444052 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.153449059 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.203376055 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.203515053 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.203557968 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.203668118 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.203849077 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.203871965 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.203896999 CEST	49985	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.203902960 CEST	443	49985	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.207190990 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.207238913 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.207319975 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.207657099 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.207674026 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.231021881 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.231097937 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.231221914 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.231247902 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.231254101 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.231262922 CEST	49986	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.231266022 CEST	443	49986	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.233689070 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.233717918 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.233817101 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.234014034 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.234026909 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.238152981 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.238300085 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.238358974 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.238399982 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.238399982 CEST	49984	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.238416910 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.238429070 CEST	443	49984	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.240958929 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.241005898 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.241070032 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.241198063 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.241215944 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.263825893 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.263855934 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.263904095 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.263916016 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.263945103 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.264125109 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.264144897 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.264159918 CEST	49987	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.264166117 CEST	443	49987	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.266392946 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.266422033 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.266573906 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.266860008 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.266871929 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.398180962 CEST	443	49988	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:33.398535013 CEST	49988	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:33.398552895 CEST	443	49988	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:33.398897886 CEST	443	49988	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:33.399322987 CEST	49988	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:33.399394989 CEST	443	49988	66.29.147.206	192.168.2.5
Oct 4, 2024 16:45:33.441669941 CEST	49988	443	192.168.2.5	66.29.147.206
Oct 4, 2024 16:45:33.664405107 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.665045023 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.665069103 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.665543079 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.665548086 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.780725956 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.780867100 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.781001091 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.781543016 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.781563044 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.781601906 CEST	49971	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.781615019 CEST	443	49971	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.784488916 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.784523964 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.784595013 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.784805059 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.784815073 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.884002924 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.884690046 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.884727001 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.885315895 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.885324001 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.894618988 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.895368099 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.895375967 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.895900965 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.895905018 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.902899981 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.903449059 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.903475046 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.903904915 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.903908968 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.915724993 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.916282892 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.916301012 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.916688919 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.916696072 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.997159958 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.997251034 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.997503996 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.997625113 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.997625113 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:33.997647047 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:33.997651100 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.000679970 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.000721931 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.001019001 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.001151085 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.001162052 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.003844023 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.003878117 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.003928900 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.003930092 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.003968000 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.004041910 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.004056931 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.004069090 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.004074097 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.006553888 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.006589890 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.006654024 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.006793976 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.006805897 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.019007921 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.019732952 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.019793034 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.019853115 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.019948006 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.020128012 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.020138979 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.020356894 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.020370960 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.022456884 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.022497892 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.022769928 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.022769928 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.022809982 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.266407013 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.266601086 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.266706944 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.267041922 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.267059088 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.307363987 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.307475090 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.307559013 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.307804108 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.307842016 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.451792955 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.470324993 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.470340967 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.470943928 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.470949888 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.570745945 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.570866108 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.570949078 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.571933031 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.571947098 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.571957111 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.571963072 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.613248110 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.613347054 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.613461018 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.617068052 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.617105961 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.653234959 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.660696983 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.660707951 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.661691904 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.661695004 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.678508043 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.678863049 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.678879023 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.679286003 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.679291010 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.686532021 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.686877966 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.686903000 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.687347889 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.687352896 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.760993004 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.761181116 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.761275053 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.761389017 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.761405945 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.761416912 CEST	49994	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.761423111 CEST	443	49994	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.764328003 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.764383078 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.764493942 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.764750957 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.764770985 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.785415888 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.785651922 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.785697937 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.785754919 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.785847902 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.785864115 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.785873890 CEST	49995	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.785878897 CEST	443	49995	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.788378000 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.788405895 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.788549900 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.788690090 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.788702965 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.789560080 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.789624929 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.789683104 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.789788008 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.789788008 CEST	49996	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.789818048 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.789827108 CEST	443	49996	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.791959047 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.791994095 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.792056084 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.792207956 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.792222023 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.984460115 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.984976053 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.985030890 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:34.985584021 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:34.985598087 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.089622021 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.089747906 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.089821100 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.090104103 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.090126038 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.090138912 CEST	49997	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.090147018 CEST	443	49997	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.093832016 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.093877077 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.093965054 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.094120979 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.094132900 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.297272921 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.297869921 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.297905922 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.298441887 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.298449039 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.406542063 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.406745911 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.406795025 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.406807899 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.406869888 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.406939030 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.406939983 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.406981945 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.407006979 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.410198927 CEST	50003	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.410245895 CEST	443	50003	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.410378933 CEST	50003	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.410542965 CEST	50003	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.410557032 CEST	443	50003	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.415072918 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.415640116 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.415677071 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.416348934 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.416356087 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.439433098 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.440038919 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.440072060 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.440563917 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.440568924 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.447442055 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.447864056 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.447876930 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.448288918 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.448292971 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.515832901 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.515892982 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.516097069 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.516222000 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.516222000 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.516237974 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.516247034 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.519366026 CEST	50004	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.519407034 CEST	443	50004	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.519500017 CEST	50004	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.519630909 CEST	50004	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.519639969 CEST	443	50004	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.538414001 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.538981915 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.539060116 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.539093971 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.539107084 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.539118052 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.539125919 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.542190075 CEST	50005	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.542227030 CEST	443	50005	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.542289019 CEST	50005	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.542435884 CEST	50005	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.542450905 CEST	443	50005	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.549850941 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.550285101 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.550328016 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.550333023 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.550384045 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.550457954 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.550457954 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.550472021 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.550476074 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.552824974 CEST	50006	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.552834034 CEST	443	50006	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.552891970 CEST	50006	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.553061008 CEST	50006	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.553072929 CEST	443	50006	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.758812904 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.759324074 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.759354115 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.759972095 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.759975910 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.863240004 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.863672018 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.863749027 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.863809109 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.863823891 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.863847017 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.863852024 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.867077112 CEST	50007	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.867117882 CEST	443	50007	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:35.867181063 CEST	50007	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.867336988 CEST	50007	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:35.867352009 CEST	443	50007	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.085952044 CEST	443	50003	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.086857080 CEST	50003	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.086886883 CEST	443	50003	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.087889910 CEST	50003	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.087896109 CEST	443	50003	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.187680006 CEST	443	50004	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.188352108 CEST	50004	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.188384056 CEST	443	50004	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.188847065 CEST	50004	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.188851118 CEST	443	50004	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.191406012 CEST	443	50005	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.191782951 CEST	50005	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.191809893 CEST	443	50005	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.192192078 CEST	50005	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.192195892 CEST	443	50005	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.196134090 CEST	443	50003	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.196177006 CEST	443	50003	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.196229935 CEST	443	50003	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.196278095 CEST	50003	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.196398020 CEST	50003	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.196417093 CEST	443	50003	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.196425915 CEST	50003	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.196432114 CEST	443	50003	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.199342966 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.199399948 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.199563980 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.199776888 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.199796915 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.221615076 CEST	443	50006	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.222115040 CEST	50006	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.222204924 CEST	443	50006	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.222604990 CEST	50006	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.222616911 CEST	443	50006	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.292766094 CEST	443	50004	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.292917967 CEST	443	50004	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.293036938 CEST	50004	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.293385029 CEST	50004	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.293404102 CEST	443	50004	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.293416977 CEST	50004	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.293422937 CEST	443	50004	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.294024944 CEST	443	50005	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.294182062 CEST	443	50005	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.294270039 CEST	50005	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.295216084 CEST	50005	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.295233011 CEST	443	50005	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.299685955 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.299729109 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.299823046 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.299829960 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.299859047 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.299885035 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.300105095 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.300117016 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.300196886 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.300214052 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.324925900 CEST	443	50006	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.325705051 CEST	443	50006	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.325752020 CEST	443	50006	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.325758934 CEST	50006	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.325793028 CEST	50006	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.325933933 CEST	50006	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.325937986 CEST	443	50006	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.325959921 CEST	50006	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.325964928 CEST	443	50006	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.328783989 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.328836918 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.328916073 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.329075098 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.329093933 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.548341036 CEST	443	50007	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.548902988 CEST	50007	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.548919916 CEST	443	50007	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.549421072 CEST	50007	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.549427986 CEST	443	50007	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.656197071 CEST	443	50007	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.656610966 CEST	443	50007	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.656708956 CEST	50007	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.656744003 CEST	50007	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.656764030 CEST	443	50007	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.656774998 CEST	50007	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.656780005 CEST	443	50007	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.659769058 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.659862995 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.659949064 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.660118103 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.660151958 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.833825111 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.838829041 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.838895082 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.839549065 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.839564085 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.947911978 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.948030949 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.948082924 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.948107958 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.948154926 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.959662914 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.959680080 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.959691048 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.959698915 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.964386940 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.968348980 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.979988098 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.987787962 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.987818956 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.988440037 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.988445044 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.988780022 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.988805056 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.989226103 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.989236116 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.989633083 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.989639997 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.990746975 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.990751028 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.993117094 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.993156910 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:36.993244886 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.993438959 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:36.993454933 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.085616112 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.085786104 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.085984945 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.089648962 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.089721918 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.090075970 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.090142965 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.090253115 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.090562105 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.091442108 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.091451883 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.091464043 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.091468096 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.107847929 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.107847929 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.107865095 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.107872009 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.111932993 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.111938953 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.111947060 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.111952066 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.143361092 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.143394947 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.143467903 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.170428038 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.170512915 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.170742035 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.177004099 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.177036047 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.177125931 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.177261114 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.177284002 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.184293985 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.184331894 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.184484005 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.184501886 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.333622932 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.334304094 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.334355116 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.334804058 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.334815025 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.442143917 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.442370892 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.442457914 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.442513943 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.442562103 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.442626953 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.442686081 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.442686081 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.442729950 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.442747116 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.445825100 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.445864916 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.446067095 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.446266890 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.446283102 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.657146931 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.657696962 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.657712936 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.658181906 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.658186913 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.774167061 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.774540901 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.774594069 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.774621010 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.774635077 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.774645090 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.774650097 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.777677059 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.777699947 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.777761936 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.777980089 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.777991056 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.822990894 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.823467970 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.823483944 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.823944092 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.823949099 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.849944115 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.850421906 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.850436926 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.851264000 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.851269960 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.869637966 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.870142937 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.870162964 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.870589018 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.870593071 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.930237055 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.930268049 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.930319071 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.930326939 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.930377007 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.930630922 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.930649042 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.930660009 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.930665016 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.933936119 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.933958054 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.934144974 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.934351921 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.934357882 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.961668968 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.961752892 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.961833954 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.962096930 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.962121010 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.962131977 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.962137938 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.965534925 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.965589046 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.965665102 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.965876102 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.965897083 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.978863955 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.979120016 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.979170084 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.979180098 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.979234934 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.979290962 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.979301929 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.979315042 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.979320049 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.982321024 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.982362032 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:37.982539892 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.982697964 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:37.982714891 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.115927935 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.116744995 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.116767883 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.117501020 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.117506027 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.229470968 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.229579926 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.229640961 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.230276108 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.230297089 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.230314970 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.230320930 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.235461950 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.235505104 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.235578060 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.235945940 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.235960007 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.424233913 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.425920010 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.425945044 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.426422119 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.426435947 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.528939009 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.529117107 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.529273033 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.559461117 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.559489012 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.559499979 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.559505939 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.563821077 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.563882113 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.563963890 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.564851999 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.564872980 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.585284948 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.587236881 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.587300062 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.587850094 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.587865114 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.605413914 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.606997967 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.607038021 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.607590914 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.607603073 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.637566090 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.638653994 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.638684034 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.639615059 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.639622927 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.691620111 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.691849947 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.691955090 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.692208052 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.692255974 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.692289114 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.692306995 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.696103096 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.696151018 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.696382999 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.696567059 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.696574926 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.713268042 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.713372946 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.713430882 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.713430882 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.713502884 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.713845968 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.713885069 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.713912964 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.713927031 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.721483946 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.721595049 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.721678972 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.722327948 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.722372055 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.738698959 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.738761902 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.738821983 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.739219904 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.739239931 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.739254951 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.739259958 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.743222952 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.743259907 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.743419886 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.743781090 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.743796110 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.932324886 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.934201002 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.934230089 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:38.935657024 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:38.935663939 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.048976898 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.049343109 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.049413919 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.049455881 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.049475908 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.059977055 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.060035944 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.060129881 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.060331106 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.060348988 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.232896090 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.235193014 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.235234976 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.235759974 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.235774040 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.342000961 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.342070103 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.342199087 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.342403889 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.342438936 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.342466116 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.342480898 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.345673084 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.345729113 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.345812082 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.345998049 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.346019030 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.353878021 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.354350090 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.354389906 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.354840040 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.354846954 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.406604052 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.407068014 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.407088995 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.407532930 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.407536983 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.415076017 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.415477037 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.415493965 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.415895939 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.415905952 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.455611944 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.455696106 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.455796003 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.456038952 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.456059933 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.456070900 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.456075907 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.459160089 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.459259033 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.459355116 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.459587097 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.459625959 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.506767035 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.506854057 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.506941080 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.507076979 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.507076979 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.507122993 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.507153034 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.509660959 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.509704113 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.509785891 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.509908915 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.509922028 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.518412113 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.518625975 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.518697023 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.518744946 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.518745899 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.518768072 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.518790007 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.520895004 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.520930052 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.521003962 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.521370888 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.521384954 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.721201897 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.722131014 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.722156048 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.723712921 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.723718882 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.827967882 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.828277111 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.828365088 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.828455925 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.828455925 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.828501940 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.828531027 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.835124969 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.835169077 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:39.835246086 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.835923910 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:39.835938931 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.040643930 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.041302919 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.041337967 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.042092085 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.042100906 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.108557940 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.109497070 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.109519958 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.110297918 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.110302925 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.149460077 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.149530888 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.149590969 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.149610996 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.149653912 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.149720907 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.150019884 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.150032997 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.150047064 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.150052071 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.154464006 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.154508114 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.154650927 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.155064106 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.155093908 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.162722111 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.163269043 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.163304090 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.164078951 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.164086103 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.189364910 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.189881086 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.189910889 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.190607071 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.190612078 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.215528011 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.215596914 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.215676069 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.270021915 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.270056009 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.270100117 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.270139933 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.270163059 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.274275064 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.274300098 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.274339914 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.274347067 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.276885986 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.276885986 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.276909113 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.276920080 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.315565109 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.315630913 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.315715075 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.347773075 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.347800016 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.347842932 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.347850084 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.385145903 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.385175943 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.385245085 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.434503078 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.434540987 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.434604883 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.495961905 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.495985031 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.501188040 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.501209021 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.504894972 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.504940033 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.505088091 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.505748987 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.505759001 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.517647982 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.518428087 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.518452883 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.519469976 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.519475937 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.656547070 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.656826973 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.656886101 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.656898022 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.656945944 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.657176018 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.657191038 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.657207966 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.657215118 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.660998106 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.661036968 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.661108971 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.661346912 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.661359072 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.852173090 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.852741003 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.852775097 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.853260994 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.853266954 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.962476015 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.962549925 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.962650061 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.962874889 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.962893009 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.962905884 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.962912083 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.966228008 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.966263056 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:40.966322899 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.966519117 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:40.966528893 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.176089048 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.177573919 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.177603960 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.178112030 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.178117037 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.188077927 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.189450026 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.189467907 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.190510988 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.190532923 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.205248117 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.206487894 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.206554890 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.207253933 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.207268000 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.292515993 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.292602062 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.292670012 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.310292006 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.310367107 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.310528994 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.312858105 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.312891960 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.312906027 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.312911987 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.316276073 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.316292048 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.316874027 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.316885948 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.321034908 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.321131945 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.321229935 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.322577953 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.322626114 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.322700977 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.322971106 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.323005915 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.324167013 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.324179888 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.327131033 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.327169895 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.327219963 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.327245951 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.327285051 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.328447104 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.328463078 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.329632044 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.330199003 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.330214024 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.330665112 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.330668926 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.334696054 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.334708929 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.334971905 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.335119963 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.335128069 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.448647022 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.448805094 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.449301004 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.449479103 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.449496984 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.449515104 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.449522018 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.457906961 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.457956076 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.458029032 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.459033012 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.459049940 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.635121107 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.641675949 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.641717911 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.642838001 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.642853022 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.742923975 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.743000984 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.743163109 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.743649006 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.743649006 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.743685961 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.743697882 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.748436928 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.748476982 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:41.748671055 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.749090910 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:41.749108076 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.007252932 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.008004904 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.008033991 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.008878946 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.008886099 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.014462948 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.014797926 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.014806986 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.015657902 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.015664101 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.047749043 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.048387051 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.048475027 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.049360037 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.049374104 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.109594107 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.110129118 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.110150099 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.110342979 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.110373974 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.110428095 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.110449076 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.110588074 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.110735893 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.111139059 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.111143112 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.111337900 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.111366987 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.111381054 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.111397028 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.114286900 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.114327908 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.114505053 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.114728928 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.114742041 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.117901087 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.117924929 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.117974043 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.118026018 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.118196011 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.118205070 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.118215084 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.118220091 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.120969057 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.120979071 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.121195078 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.121195078 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.121218920 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.153105974 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.153167009 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.153296947 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.153322935 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.153336048 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.153347969 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.153352976 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.155400991 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.155427933 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.155539036 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.155672073 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.155685902 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.226314068 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.226344109 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.226413965 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.226428032 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.226722002 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.226733923 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.226758003 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.226888895 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.226924896 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.226988077 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.229770899 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.229799986 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.229868889 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.230041981 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.230055094 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.387176991 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.387856007 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.387917995 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.388371944 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.388385057 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.499265909 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.499366045 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.499538898 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.499603033 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.499653101 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.499764919 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.499764919 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.499766111 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.499815941 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.503371954 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.503417015 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.503546953 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.503778934 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.503793001 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.772056103 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.780735016 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.780754089 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.781455994 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.781462908 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.802397966 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.802469969 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.819490910 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.820198059 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.820213079 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.821023941 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.821029902 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.828643084 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.829013109 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.829040051 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.829457045 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.829462051 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.881190062 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.881236076 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.881290913 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.881318092 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.881362915 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.881405115 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.881771088 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.881788969 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.881798983 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.881803989 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.885144949 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.885189056 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.885359049 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.885615110 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.885629892 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.924077988 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.928092003 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.928250074 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.928302050 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.931891918 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.931957006 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:42.932008982 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:42.974246979 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.083297014 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.083339930 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.083961010 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.083975077 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.084420919 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.084453106 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.084465027 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.084470987 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.086194992 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.086194992 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.086266041 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.086298943 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.090074062 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.090133905 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.090207100 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.090332031 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.090348005 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.091574907 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.091609955 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.091675997 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.091842890 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.091856003 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.182080030 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.182244062 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.182320118 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.182395935 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.182430029 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.182461023 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.182476044 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.183789968 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.184696913 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.184719086 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.185419083 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.185425043 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.187592983 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.187639952 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.187772036 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.187872887 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.187881947 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.287668943 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.287821054 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.287883997 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.290438890 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.290438890 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.290461063 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.290471077 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.295439959 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.295480967 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.295537949 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.295703888 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.295718908 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.541790009 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.551120996 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.551145077 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.551826000 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.551837921 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.675745010 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.675803900 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.675915003 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.675935030 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.675962925 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.675982952 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.676059961 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.676254988 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.676276922 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.676474094 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.676479101 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.681504965 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.681600094 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.681689024 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.681866884 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.681900978 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.753705978 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.754317045 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.754336119 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.754951954 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.754956007 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.787553072 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.788063049 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.788105965 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.788727999 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.788741112 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.849291086 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.850323915 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.850348949 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.851093054 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.851098061 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.866153955 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.866185904 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.866236925 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.866247892 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.866295099 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.866508007 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.866522074 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.866533995 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.866539001 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.870248079 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.870290041 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.870357037 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.870490074 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.870498896 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.915903091 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.915935040 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.915955067 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.916022062 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.916064024 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.916126013 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.962969065 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.962996960 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.963049889 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.963068962 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.963121891 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.968755007 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.968770981 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.968780994 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.968786001 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.971381903 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.971425056 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.971681118 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.971822023 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.971833944 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.990833998 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.991405010 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.991416931 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.992150068 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:43.992153883 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:43.999979019 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.000096083 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.000132084 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.000181913 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.000181913 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.000183105 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.000233889 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.000288963 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.000318050 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.002742052 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.002758026 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.002887011 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.003153086 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.003165960 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.133408070 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.133440018 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.133474112 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.133507967 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.133533955 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.133560896 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.133586884 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.212800980 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.212840080 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.212878942 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.212894917 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.212908030 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.212940931 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.212961912 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.213143110 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.213157892 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.213169098 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.213174105 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.216344118 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.216438055 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.216516018 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.216671944 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.216696024 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.363341093 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.363925934 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.363955021 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.364428043 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.364433050 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.485188007 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.485219002 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.485301971 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.485317945 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.485353947 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.485415936 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.485466003 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.485515118 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.485704899 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.485721111 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.485729933 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.485742092 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.488997936 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.489093065 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.489317894 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.489495993 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.489532948 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.595108032 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.595793962 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.595819950 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.596303940 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.596308947 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.659676075 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.660207987 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.660223961 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.660684109 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.660689116 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.675694942 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.676136017 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.676145077 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.676594019 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.676598072 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.714879990 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.714941978 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.715006113 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.715033054 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.715358019 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.715374947 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.715382099 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.715751886 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.715837002 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.716070890 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.718401909 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.718477011 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.718554974 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.718704939 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.718738079 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.777497053 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.777555943 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.777666092 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.777988911 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.778002024 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.778016090 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.778021097 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.781137943 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.781172037 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.781248093 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.781445026 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.781457901 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.788722992 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.788784027 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.788846016 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.788954973 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.788963079 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.788973093 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.788976908 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.791403055 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.791440964 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.791503906 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.791665077 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.791678905 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.883078098 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.883600950 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.883629084 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:44.884143114 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:44.884147882 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.045254946 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.045331001 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.045685053 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.045685053 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.045979977 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.045994997 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.048604965 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.048640966 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.048774958 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.048907995 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.048923016 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.159677029 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.160816908 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.160816908 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.160856009 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.160870075 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.274197102 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.274723053 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.274924994 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.275151968 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.275192976 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.275244951 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.275262117 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.278471947 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.278501987 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.278790951 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.278943062 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.278959036 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.413108110 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.413976908 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.414021969 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.414542913 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.414554119 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.491686106 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.492553949 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.492572069 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.493284941 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.493289948 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.505530119 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.506027937 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.506110907 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.506553888 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.506570101 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.530431032 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.530502081 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.530610085 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.530669928 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.530848980 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.530848980 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.530905008 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.530945063 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.530962944 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.623306990 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.623451948 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.623671055 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.623892069 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.623909950 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.623945951 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.623953104 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.630970955 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.631122112 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.631299019 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.631299973 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.631431103 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.631464005 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.751965046 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.752703905 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.752729893 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.753026962 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.753031969 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.859824896 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.859903097 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.860187054 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.860215902 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.860215902 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.860232115 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.860240936 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.980479002 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.981055975 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.981142044 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:45.981534958 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:45.981549978 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:46.081173897 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:46.081360102 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:46.081434011 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:46.081605911 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:46.081624985 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:46.081636906 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 4, 2024 16:45:46.081643105 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 4, 2024 16:45:47.869193077 CEST	50067	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:45:47.869246006 CEST	443	50067	142.250.186.36	192.168.2.5
Oct 4, 2024 16:45:47.869385958 CEST	50067	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:45:47.869718075 CEST	50067	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:45:47.869739056 CEST	443	50067	142.250.186.36	192.168.2.5
Oct 4, 2024 16:45:48.587342024 CEST	443	50067	142.250.186.36	192.168.2.5
Oct 4, 2024 16:45:48.587964058 CEST	50067	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:45:48.587985039 CEST	443	50067	142.250.186.36	192.168.2.5
Oct 4, 2024 16:45:48.589142084 CEST	443	50067	142.250.186.36	192.168.2.5
Oct 4, 2024 16:45:48.592025042 CEST	50067	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:45:48.592108965 CEST	443	50067	142.250.186.36	192.168.2.5
Oct 4, 2024 16:45:48.644814968 CEST	50067	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:45:51.458659887 CEST	50068	443	192.168.2.5	52.108.9.12
Oct 4, 2024 16:45:51.458719969 CEST	443	50068	52.108.9.12	192.168.2.5
Oct 4, 2024 16:45:51.458789110 CEST	50068	443	192.168.2.5	52.108.9.12
Oct 4, 2024 16:45:51.459614038 CEST	50068	443	192.168.2.5	52.108.9.12
Oct 4, 2024 16:45:51.459635019 CEST	443	50068	52.108.9.12	192.168.2.5
Oct 4, 2024 16:45:52.115489006 CEST	443	50068	52.108.9.12	192.168.2.5
Oct 4, 2024 16:45:52.115796089 CEST	50068	443	192.168.2.5	52.108.9.12
Oct 4, 2024 16:45:52.115818024 CEST	443	50068	52.108.9.12	192.168.2.5
Oct 4, 2024 16:45:52.116326094 CEST	443	50068	52.108.9.12	192.168.2.5
Oct 4, 2024 16:45:52.117157936 CEST	50068	443	192.168.2.5	52.108.9.12
Oct 4, 2024 16:45:52.117237091 CEST	443	50068	52.108.9.12	192.168.2.5
Oct 4, 2024 16:45:52.117335081 CEST	50068	443	192.168.2.5	52.108.9.12
Oct 4, 2024 16:45:52.160721064 CEST	50068	443	192.168.2.5	52.108.9.12
Oct 4, 2024 16:45:52.160737991 CEST	443	50068	52.108.9.12	192.168.2.5
Oct 4, 2024 16:45:52.319725037 CEST	443	50068	52.108.9.12	192.168.2.5
Oct 4, 2024 16:45:52.319843054 CEST	50068	443	192.168.2.5	52.108.9.12
Oct 4, 2024 16:45:52.319849014 CEST	443	50068	52.108.9.12	192.168.2.5
Oct 4, 2024 16:45:52.319897890 CEST	50068	443	192.168.2.5	52.108.9.12
Oct 4, 2024 16:45:52.322884083 CEST	50068	443	192.168.2.5	52.108.9.12
Oct 4, 2024 16:45:52.322904110 CEST	443	50068	52.108.9.12	192.168.2.5
Oct 4, 2024 16:45:58.446397066 CEST	443	50067	142.250.186.36	192.168.2.5
Oct 4, 2024 16:45:58.446501017 CEST	443	50067	142.250.186.36	192.168.2.5
Oct 4, 2024 16:45:58.446609020 CEST	50067	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:45:59.667144060 CEST	50067	443	192.168.2.5	142.250.186.36
Oct 4, 2024 16:45:59.667171001 CEST	443	50067	142.250.186.36	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 4, 2024 16:44:45.291488886 CEST	53	64371	1.1.1.1	192.168.2.5
Oct 4, 2024 16:44:45.299132109 CEST	53	55193	1.1.1.1	192.168.2.5
Oct 4, 2024 16:44:46.389728069 CEST	53	63097	1.1.1.1	192.168.2.5
Oct 4, 2024 16:44:47.126091957 CEST	63875	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:44:47.126251936 CEST	52699	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:44:47.818111897 CEST	65221	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:44:47.818366051 CEST	59680	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:44:47.825872898 CEST	53	59680	1.1.1.1	192.168.2.5
Oct 4, 2024 16:44:47.826320887 CEST	53	65221	1.1.1.1	192.168.2.5
Oct 4, 2024 16:44:50.814975023 CEST	65355	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:44:50.833488941 CEST	59879	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:44:51.692383051 CEST	58791	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:44:51.692912102 CEST	49719	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:44:56.086625099 CEST	54506	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:44:56.086864948 CEST	62787	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:45:03.769691944 CEST	53	65440	1.1.1.1	192.168.2.5
Oct 4, 2024 16:45:15.876070023 CEST	52031	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:45:15.876720905 CEST	62352	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:45:16.910967112 CEST	51076	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:45:16.911648989 CEST	64613	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:45:17.514358044 CEST	53	52031	1.1.1.1	192.168.2.5
Oct 4, 2024 16:45:17.514374018 CEST	53	62352	1.1.1.1	192.168.2.5
Oct 4, 2024 16:45:18.223545074 CEST	53	51076	1.1.1.1	192.168.2.5
Oct 4, 2024 16:45:18.253686905 CEST	53	64613	1.1.1.1	192.168.2.5
Oct 4, 2024 16:45:21.093841076 CEST	53	62807	1.1.1.1	192.168.2.5
Oct 4, 2024 16:45:21.372483015 CEST	59962	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:45:21.372620106 CEST	54347	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:45:21.397248030 CEST	63251	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:45:21.397658110 CEST	63445	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:45:22.118252039 CEST	53	63251	1.1.1.1	192.168.2.5
Oct 4, 2024 16:45:22.119048119 CEST	58563	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:45:22.119400024 CEST	60893	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:45:22.152754068 CEST	53	63445	1.1.1.1	192.168.2.5
Oct 4, 2024 16:45:23.085099936 CEST	53	49314	1.1.1.1	192.168.2.5
Oct 4, 2024 16:45:44.023619890 CEST	53	62374	1.1.1.1	192.168.2.5
Oct 4, 2024 16:45:47.579703093 CEST	53	61107	1.1.1.1	192.168.2.5
Oct 4, 2024 16:45:57.077939987 CEST	64085	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:45:57.078172922 CEST	51412	53	192.168.2.5	1.1.1.1
Oct 4, 2024 16:46:12.514200926 CEST	53	64132	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 4, 2024 16:44:50.852839947 CEST	192.168.2.5	1.1.1.1	c2b2	(Port unreachable)	Destination Unreachable
Oct 4, 2024 16:44:51.729501009 CEST	192.168.2.5	1.1.1.1	c2b2	(Port unreachable)	Destination Unreachable
Oct 4, 2024 16:44:56.106765985 CEST	192.168.2.5	1.1.1.1	c28a	(Port unreachable)	Destination Unreachable
Oct 4, 2024 16:45:18.224543095 CEST	192.168.2.5	1.1.1.1	c1f5	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 16:44:47.126091957 CEST	192.168.2.5	1.1.1.1	0x4c3a	Standard query (0)	vestliaresort-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:47.126251936 CEST	192.168.2.5	1.1.1.1	0x2815	Standard query (0)	vestliaresort-my.sharepoint.com	65	IN (0x0001)	false
Oct 4, 2024 16:44:47.818111897 CEST	192.168.2.5	1.1.1.1	0x5477	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:47.818366051 CEST	192.168.2.5	1.1.1.1	0xe0c3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 16:44:50.814975023 CEST	192.168.2.5	1.1.1.1	0x4cd7	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:50.833488941 CEST	192.168.2.5	1.1.1.1	0xa250	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Oct 4, 2024 16:44:51.692383051 CEST	192.168.2.5	1.1.1.1	0x56a2	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:51.692912102 CEST	192.168.2.5	1.1.1.1	0x8448	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Oct 4, 2024 16:44:56.086625099 CEST	192.168.2.5	1.1.1.1	0x8d57	Standard query (0)	onenoteonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:56.086864948 CEST	192.168.2.5	1.1.1.1	0xbbe9	Standard query (0)	onenoteonline.nel.measure.office.net	65	IN (0x0001)	false
Oct 4, 2024 16:45:15.876070023 CEST	192.168.2.5	1.1.1.1	0x9a6f	Standard query (0)	qafshah.com.sa	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:15.876720905 CEST	192.168.2.5	1.1.1.1	0x5a0a	Standard query (0)	qafshah.com.sa	65	IN (0x0001)	false
Oct 4, 2024 16:45:16.910967112 CEST	192.168.2.5	1.1.1.1	0xca20	Standard query (0)	qafshah.com.sa	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:16.911648989 CEST	192.168.2.5	1.1.1.1	0x2a57	Standard query (0)	qafshah.com.sa	65	IN (0x0001)	false
Oct 4, 2024 16:45:21.372483015 CEST	192.168.2.5	1.1.1.1	0x1ded	Standard query (0)	euc-common.online.office.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:21.372620106 CEST	192.168.2.5	1.1.1.1	0xe63f	Standard query (0)	euc-common.online.office.com	65	IN (0x0001)	false
Oct 4, 2024 16:45:21.397248030 CEST	192.168.2.5	1.1.1.1	0xdd20	Standard query (0)	qafshah.com.sa	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:21.397658110 CEST	192.168.2.5	1.1.1.1	0x1803	Standard query (0)	qafshah.com.sa	65	IN (0x0001)	false
Oct 4, 2024 16:45:22.119048119 CEST	192.168.2.5	1.1.1.1	0xc16b	Standard query (0)	euc-common.online.office.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:22.119400024 CEST	192.168.2.5	1.1.1.1	0x486c	Standard query (0)	euc-common.online.office.com	65	IN (0x0001)	false
Oct 4, 2024 16:45:57.077939987 CEST	192.168.2.5	1.1.1.1	0x4458	Standard query (0)	onenoteonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:57.078172922 CEST	192.168.2.5	1.1.1.1	0xc58b	Standard query (0)	onenoteonline.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 4, 2024 16:44:47.167068958 CEST	1.1.1.1	192.168.2.5	0x4c3a	No error (0)	vestliaresort-my.sharepoint.com	vestliaresort.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:47.167068958 CEST	1.1.1.1	192.168.2.5	0x4c3a	No error (0)	vestliaresort.sharepoint.com	7088-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:47.167068958 CEST	1.1.1.1	192.168.2.5	0x4c3a	No error (0)	7088-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	190101-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:47.167068958 CEST	1.1.1.1	192.168.2.5	0x4c3a	No error (0)	190101-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	190101-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:47.167068958 CEST	1.1.1.1	192.168.2.5	0x4c3a	No error (0)	190101-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:47.167068958 CEST	1.1.1.1	192.168.2.5	0x4c3a	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:47.167068958 CEST	1.1.1.1	192.168.2.5	0x4c3a	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:47.175416946 CEST	1.1.1.1	192.168.2.5	0x2815	No error (0)	vestliaresort-my.sharepoint.com	vestliaresort.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:47.175416946 CEST	1.1.1.1	192.168.2.5	0x2815	No error (0)	vestliaresort.sharepoint.com	7088-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:47.175416946 CEST	1.1.1.1	192.168.2.5	0x2815	No error (0)	7088-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	190101-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:47.175416946 CEST	1.1.1.1	192.168.2.5	0x2815	No error (0)	190101-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	190101-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:47.825872898 CEST	1.1.1.1	192.168.2.5	0xe0c3	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 16:44:47.826320887 CEST	1.1.1.1	192.168.2.5	0x5477	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:49.357867956 CEST	1.1.1.1	192.168.2.5	0xcfc8	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:49.357867956 CEST	1.1.1.1	192.168.2.5	0xcfc8	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:49.357867956 CEST	1.1.1.1	192.168.2.5	0xcfc8	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:50.830095053 CEST	1.1.1.1	192.168.2.5	0x4cd7	No error (0)	common.online.office.com	common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:50.830095053 CEST	1.1.1.1	192.168.2.5	0x4cd7	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:50.830095053 CEST	1.1.1.1	192.168.2.5	0x4cd7	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:50.830095053 CEST	1.1.1.1	192.168.2.5	0x4cd7	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:50.852404118 CEST	1.1.1.1	192.168.2.5	0xa250	No error (0)	common.online.office.com	common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:51.023880005 CEST	1.1.1.1	192.168.2.5	0x5151	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:51.023880005 CEST	1.1.1.1	192.168.2.5	0x5151	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:51.023880005 CEST	1.1.1.1	192.168.2.5	0x5151	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:51.710784912 CEST	1.1.1.1	192.168.2.5	0x56a2	No error (0)	common.online.office.com	common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:51.710784912 CEST	1.1.1.1	192.168.2.5	0x56a2	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:51.710784912 CEST	1.1.1.1	192.168.2.5	0x56a2	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:51.710784912 CEST	1.1.1.1	192.168.2.5	0x56a2	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:51.725976944 CEST	1.1.1.1	192.168.2.5	0x8448	No error (0)	common.online.office.com	common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:54.951353073 CEST	1.1.1.1	192.168.2.5	0x91fe	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:54.951353073 CEST	1.1.1.1	192.168.2.5	0x91fe	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:54.951353073 CEST	1.1.1.1	192.168.2.5	0x91fe	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:44:56.096718073 CEST	1.1.1.1	192.168.2.5	0x8d57	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:56.106692076 CEST	1.1.1.1	192.168.2.5	0xbbe9	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:58.022182941 CEST	1.1.1.1	192.168.2.5	0xada3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:44:58.022182941 CEST	1.1.1.1	192.168.2.5	0xada3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:15.371279001 CEST	1.1.1.1	192.168.2.5	0xbb1c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:45:15.371279001 CEST	1.1.1.1	192.168.2.5	0xbb1c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:17.514358044 CEST	1.1.1.1	192.168.2.5	0x9a6f	No error (0)	qafshah.com.sa		66.29.147.206	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:18.223545074 CEST	1.1.1.1	192.168.2.5	0xca20	No error (0)	qafshah.com.sa		66.29.147.206	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:21.384103060 CEST	1.1.1.1	192.168.2.5	0xe63f	No error (0)	euc-common.online.office.com	euc-common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:45:21.384207010 CEST	1.1.1.1	192.168.2.5	0x1ded	No error (0)	euc-common.online.office.com	euc-common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:45:21.384207010 CEST	1.1.1.1	192.168.2.5	0x1ded	No error (0)	euc-common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:45:21.384207010 CEST	1.1.1.1	192.168.2.5	0x1ded	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:21.384207010 CEST	1.1.1.1	192.168.2.5	0x1ded	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:22.118252039 CEST	1.1.1.1	192.168.2.5	0xdd20	No error (0)	qafshah.com.sa		66.29.147.206	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:22.126213074 CEST	1.1.1.1	192.168.2.5	0x486c	No error (0)	euc-common.online.office.com	euc-common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:45:22.126254082 CEST	1.1.1.1	192.168.2.5	0xc16b	No error (0)	euc-common.online.office.com	euc-common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:45:22.126254082 CEST	1.1.1.1	192.168.2.5	0xc16b	No error (0)	euc-common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:45:22.126254082 CEST	1.1.1.1	192.168.2.5	0xc16b	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:22.126254082 CEST	1.1.1.1	192.168.2.5	0xc16b	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:40.302681923 CEST	1.1.1.1	192.168.2.5	0x552c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:45:40.302681923 CEST	1.1.1.1	192.168.2.5	0x552c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:51.456954002 CEST	1.1.1.1	192.168.2.5	0xb82f	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:45:51.456954002 CEST	1.1.1.1	192.168.2.5	0xb82f	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:51.456954002 CEST	1.1.1.1	192.168.2.5	0xb82f	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:56.937047958 CEST	1.1.1.1	192.168.2.5	0xd58e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:45:56.937047958 CEST	1.1.1.1	192.168.2.5	0xd58e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 16:45:57.085819006 CEST	1.1.1.1	192.168.2.5	0x4458	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 16:45:57.086518049 CEST	1.1.1.1	192.168.2.5	0xc58b	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

vestliaresort-my.sharepoint.com

https:

euc-onenote.officeapps.live.com

common.online.office.com

qafshah.com.sa

euc-common.online.office.com

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	13.107.136.10	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:48 UTC	760	OUT	GET /:o:/g/personal/ziga_vestlia_no/Eky579E0q2lOhPOUshOGsHcBMaZdCfwRcrEzHT2ZmUZxNA?e=ksWeaa HTTP/1.1 Host: vestliaresort-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:44:48 UTC	4016	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 580 Content-Type: text/html; charset=utf-8 Location: https://vestliaresort-my.sharepoint.com/personal/ziga_vestlia_no/_layouts/15/Doc.aspx?sourcedoc=%7Bd1efb94c-ab34-4e69-84f3-94b21386b077%7D&action=default&slrid=a6a256a1-b078-a000-02c8-ea94a1984611&originalPath=aHR0cHM6Ly92ZXN0bGlhcmVzb3J0LW15LnNoYXJlcG9pbnQuY29tLzpvOi9nL3BlcnNvbmFsL3ppZ2FfdmVzdGxpYV9uby9Fa3k1NzlFMHEybE9oUE9Vc2hPR3NIY0JNYVpkQ2Z3UmNyRXpIVDJabVVaeE5BP3J0aW1lPXROaVNHSVBrM0Vn&CID=389d5043-1da4-437d-a2e6-74f17f2ef81c&_SRM=0:G:97 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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 [TRUNCATED] X-NetworkStatistics: 0,525568,0,0,85056,0,88264,73 X-SharePointHealthScore: 0 X-MS-SPO-CookieValidator: L1OJeIagiclqCkaNtWD1OAmjrogJhchy5a8Sz3LZsZ2I2hvtkrUqcFAdW25c2gHC0ZO81e5G7eBC2NGh6mgQZHqPSrl2nOwiaV3e3hmy2a3iqcJHWwMKtKvLt6TM/LmR1Nrq+I7sDv/fdn9WzYRjPAXOmY936Db9WTIXgmXOpEWubspEwoKc/RHYEZFHohxi24G4JUp4g+VttnIrUH/yR0t9hz/aBwq+Vm7kk1115l/BLT609xDNKFfK/hCjpxQePRocRpuHVeE8wnrY3ZhWIHONmrkTn4t8bfNEJhLs4FxWMpm5Bt1tnvtdYcDiqG/NgLaLmi4RBuDpYnjfHniK+g== X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: a6a256a1-b078-a000-02c8-ea94a1984611 request-id: a6a256a1-b078-a000-02c8-ea94a1984611 MS-CV: oVaipniwAKACyOqUoZhGEQ.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=1d73f34a-3b75-47dc-98ce-168ebcc6212c&destinationEndpoint=Edge-Prod-EWR31r5b&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 269 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25311 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 8D0FE25567FD4F9986AAF8E755E97FCB Ref B: EWR311000103039 Ref C: 2024-10-04T14:44:48Z Date: Fri, 04 Oct 2024 14:44:47 GMT Connection: close
2024-10-04 14:44:48 UTC	406	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 65 73 74 6c 69 61 72 65 73 6f 72 74 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 7a 69 67 61 5f 76 65 73 74 6c 69 61 5f 6e 6f 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 44 6f 63 2e 61 73 70 78 3f 73 6f 75 72 63 65 64 6f 63 3d 25 37 42 64 31 65 66 62 39 34 63 2d 61 62 33 34 2d 34 65 36 39 2d 38 34 66 33 2d 39 34 62 32 31 33 38 36 62 30 37 37 25 37 44 26 61 6d 70 3b 61 63 74 69 6f 6e 3d 64 65 66 61 75 6c 74 26 61 6d 70 3b 73 6c 72 69 64 3d 61 36 61 32 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://vestliaresort-my.sharepoint.com/personal/ziga_vestlia_no/_layouts/15/Doc.aspx?sourcedoc=%7Bd1efb94c-ab34-4e69-84f3-94b21386b077%7D&action=default&slrid=a6a2
2024-10-04 14:44:48 UTC	174	IN	Data Raw: 7a 6c 46 4d 48 45 79 62 45 39 6f 55 45 39 56 63 32 68 50 52 33 4e 49 59 30 4a 4e 59 56 70 6b 51 32 5a 33 55 6d 4e 79 52 58 70 49 56 44 4a 61 62 56 56 61 65 45 35 42 50 33 4a 30 61 57 31 6c 50 58 52 4f 61 56 4e 48 53 56 42 72 4d 30 56 6e 26 61 6d 70 3b 43 49 44 3d 33 38 39 64 35 30 34 33 2d 31 64 61 34 2d 34 33 37 64 2d 61 32 65 36 2d 37 34 66 31 37 66 32 65 66 38 31 63 26 61 6d 70 3b 5f 53 52 4d 3d 30 3a 47 3a 39 37 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: zlFMHEybE9oUE9Vc2hPR3NIY0JNYVpkQ2Z3UmNyRXpIVDJabVVaeE5BP3J0aW1lPXROaVNHSVBrM0Vn&CID=389d5043-1da4-437d-a2e6-74f17f2ef81c&_SRM=0:G:97">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	13.107.136.10	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:48 UTC	2239	OUT	GET /personal/ziga_vestlia_no/_layouts/15/Doc.aspx?sourcedoc=%7Bd1efb94c-ab34-4e69-84f3-94b21386b077%7D&action=default&slrid=a6a256a1-b078-a000-02c8-ea94a1984611&originalPath=aHR0cHM6Ly92ZXN0bGlhcmVzb3J0LW15LnNoYXJlcG9pbnQuY29tLzpvOi9nL3BlcnNvbmFsL3ppZ2FfdmVzdGxpYV9uby9Fa3k1NzlFMHEybE9oUE9Vc2hPR3NIY0JNYVpkQ2Z3UmNyRXpIVDJabVVaeE5BP3J0aW1lPXROaVNHSVBrM0Vn&CID=389d5043-1da4-437d-a2e6-74f17f2ef81c&_SRM=0:G:97 HTTP/1.1 Host: vestliaresort-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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 [TRUNCATED]
2024-10-04 14:44:48 UTC	3306	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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 [TRUNCATED] X-NetworkStatistics: 0,525568,0,0,160,0,26332,73 X-SharePointHealthScore: 1 Referrer-Policy: no-referrer, strict-origin-when-cross-origin Server-Timing: LT; desc=0, RS; desc=G, RD; dur=97 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: a6a256a1-20a3-a000-26c1-e4f692f076a8 request-id: a6a256a1-20a3-a000-26c1-e4f692f076a8 MS-CV: oVaipqMgAKAmweT2kvB2qA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=1d73f34a-3b75-47dc-98ce-168ebcc6212c&destinationEndpoint=Edge-Prod-EWR31r5a&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25311 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: A3745CDDCBF64E70BD4F50A67BD3ADEE Ref B: EWR311000101019 Ref C: 2024-10-04T14:44:48Z Date: Fri, 04 Oct 2024 14:44:48 GMT Connection: close
2024-10-04 14:44:48 UTC	864	IN	Data Raw: 33 35 39 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 09 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0d 0a 09 3c 6d 65 74 61 0d 0a 09 09 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0d 0a 09 09 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f Data Ascii: 359<!DOCTYPE html><html lang="en-us" dir="ltr"><head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><metaname="viewport"content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no
2024-10-04 14:44:48 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 61 73 63 72 69 70 74 22 3e 0d 0a 09 09 76 61 72 20 77 6f 70 69 44 69 61 67 43 6c 69 65 6e 74 20 3d 20 7b 20 64 6f 63 46 69 72 73 74 46 6c 75 73 68 54 69 6d 65 20 3a 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 20 7d 20 3b 0d 0a 09 09 76 61 72 20 77 61 63 55 69 48 6f 73 74 53 65 73 73 69 6f 6e 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 09 76 61 72 20 77 6f 70 69 43 6f 6e 74 65 78 74 46 6c 75 73 68 54 69 6d 65 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 09 76 61 72 20 69 73 45 61 72 6c 79 46 6c 75 73 68 45 6e 61 62 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 09 09 76 61 72 20 66 69 72 73 74 46 6c 75 73 68 45 6e 64 54 69 6d 65 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 09 76 61 72 20 69 73 44 6f 63 32 41 73 70 78 20 3d 20 66 61 6c 73 65 3b 0d 0a 09 09 76 Data Ascii: 2000ascript">var wopiDiagClient = { docFirstFlushTime : new Date().getTime() } ;var wacUiHostSession = null;var wopiContextFlushTime = null;var isEarlyFlushEnabled = false;var firstFlushEndTime = null;var isDoc2Aspx = false;v
2024-10-04 14:44:48 UTC	4152	IN	Data Raw: 31 30 33 30 0d 0a 31 36 39 36 37 30 2c 38 39 36 30 31 30 30 37 32 2c 2d 31 34 30 39 36 33 38 31 30 2c 2d 36 31 34 32 31 30 38 33 36 2c 39 37 38 38 34 38 31 32 33 2c 2d 38 31 32 35 31 37 37 33 39 2c 2d 35 37 35 36 39 35 34 33 39 2c 33 34 32 36 30 31 31 33 34 2c 2d 36 38 30 34 37 37 32 34 30 2c 31 35 35 31 38 37 34 35 33 35 2c 2d 31 37 36 36 38 38 31 33 31 2c 2d 36 38 36 38 33 34 35 37 2c 2d 32 31 33 35 31 38 38 31 30 32 2c 2d 31 34 31 33 39 30 31 31 38 2c 2d 31 35 36 34 33 35 36 34 32 2c 32 30 36 33 34 38 30 38 32 33 2c 2d 31 32 37 36 36 35 38 35 37 35 2c 32 30 34 31 36 39 39 36 35 32 2c 2d 38 39 31 34 35 33 35 39 37 2c 35 31 37 37 38 33 38 33 39 2c 32 35 39 34 36 33 31 33 30 2c 2d 38 34 36 33 31 38 33 36 33 2c 2d 39 35 35 32 36 36 31 34 30 2c 31 39 35 31 Data Ascii: 1030169670,896010072,-140963810,-614210836,978848123,-812517739,-575695439,342601134,-680477240,1551874535,-176688131,-68683457,-2135188102,-141390118,-156435642,2063480823,-1276658575,2041699652,-891453597,517783839,259463130,-846318363,-955266140,1951
2024-10-04 14:44:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 3a 31 2c 22 41 38 39 33 44 45 31 30 2d 42 39 37 42 2d 34 36 38 39 2d 41 38 33 43 2d 37 43 31 43 35 30 33 30 44 42 42 31 22 3a 31 2c 22 45 36 38 46 34 44 39 31 2d 34 46 34 35 2d 34 30 33 34 2d 42 30 43 37 2d 45 41 42 41 39 36 46 32 33 43 31 35 22 3a 31 2c 22 38 30 33 44 45 35 30 41 2d 30 44 34 31 2d 34 44 37 43 2d 39 35 31 32 2d 45 37 41 34 41 44 45 37 34 34 33 31 22 3a 31 2c 22 44 43 44 32 45 38 39 46 2d 35 38 44 34 2d 34 37 30 43 2d 38 32 33 39 2d 30 39 37 37 31 33 33 42 38 35 35 37 22 3a 31 2c 22 44 39 42 38 30 41 43 45 2d 44 33 39 41 2d 34 32 46 32 2d 39 39 33 42 2d 30 34 46 33 45 35 41 46 34 31 34 37 22 3a 31 2c 22 35 36 45 45 33 35 30 37 2d 45 44 35 32 2d 34 46 30 38 2d 41 44 43 35 2d 38 30 34 46 41 45 35 35 31 39 38 46 22 3a 31 2c Data Ascii: 2000:1,"A893DE10-B97B-4689-A83C-7C1C5030DBB1":1,"E68F4D91-4F45-4034-B0C7-EABA96F23C15":1,"803DE50A-0D41-4D7C-9512-E7A4ADE74431":1,"DCD2E89F-58D4-470C-8239-0977133B8557":1,"D9B80ACE-D39A-42F2-993B-04F3E5AF4147":1,"56EE3507-ED52-4F08-ADC5-804FAE55198F":1,
2024-10-04 14:44:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 37 39 46 39 37 38 34 22 3a 31 2c 22 39 42 33 30 38 45 41 36 2d 45 37 33 45 2d 34 36 45 34 2d 41 31 34 37 2d 38 41 34 42 30 44 39 37 35 32 35 30 22 3a 31 2c 22 44 39 34 41 30 45 38 46 2d 43 30 42 34 2d 34 38 39 39 2d 42 30 42 43 2d 41 45 34 44 42 45 46 41 36 33 37 45 22 3a 31 2c 22 35 39 37 39 42 43 34 35 2d 35 38 46 32 2d 34 33 45 31 2d 39 31 43 46 2d 30 38 44 38 33 46 35 39 31 36 34 46 22 3a 31 2c 22 43 38 31 37 38 32 34 33 2d 45 44 42 35 2d 34 38 42 39 2d 42 44 33 39 2d 41 35 46 39 41 42 45 39 41 39 37 43 22 3a 31 2c 22 32 37 37 31 32 35 35 34 2d 32 33 36 39 2d 34 36 44 31 2d 38 31 43 37 2d 34 37 41 45 44 46 45 34 36 42 33 38 22 3a 31 2c 22 33 46 38 32 45 41 35 30 2d 35 46 34 38 2d 34 36 44 33 2d 42 44 38 39 2d 31 39 30 30 46 38 43 39 Data Ascii: 200079F9784":1,"9B308EA6-E73E-46E4-A147-8A4B0D975250":1,"D94A0E8F-C0B4-4899-B0BC-AE4DBEFA637E":1,"5979BC45-58F2-43E1-91CF-08D83F59164F":1,"C8178243-EDB5-48B9-BD39-A5F9ABE9A97C":1,"27712554-2369-46D1-81C7-47AEDFE46B38":1,"3F82EA50-5F48-46D3-BD89-1900F8C9
2024-10-04 14:44:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 46 36 2d 46 35 46 38 38 30 39 46 30 38 41 31 22 3a 31 2c 22 45 37 44 30 42 43 46 43 2d 31 31 44 38 2d 34 38 45 45 2d 39 38 34 38 2d 42 39 33 46 32 38 39 38 37 31 37 38 22 3a 31 2c 22 39 39 38 45 37 41 36 34 2d 38 45 38 41 2d 34 38 43 45 2d 39 37 42 38 2d 33 45 41 34 46 37 44 35 44 43 35 41 22 3a 31 2c 22 34 36 33 30 46 42 34 35 2d 36 43 45 42 2d 34 31 39 44 2d 39 36 35 36 2d 36 37 35 33 31 41 46 41 44 30 39 42 22 3a 31 2c 22 43 32 37 45 42 30 33 33 2d 43 36 36 39 2d 34 32 39 43 2d 41 39 43 45 2d 32 42 34 39 33 36 39 30 33 41 33 41 22 3a 31 2c 22 34 33 34 41 39 32 39 30 2d 30 42 35 31 2d 34 45 34 43 2d 41 43 30 37 2d 39 46 43 41 31 45 44 38 43 36 39 43 22 3a 31 2c 22 30 31 33 35 34 35 32 30 2d 42 38 45 33 2d 34 36 35 45 2d 38 43 31 41 2d Data Ascii: 2000F6-F5F8809F08A1":1,"E7D0BCFC-11D8-48EE-9848-B93F28987178":1,"998E7A64-8E8A-48CE-97B8-3EA4F7D5DC5A":1,"4630FB45-6CEB-419D-9656-67531AFAD09B":1,"C27EB033-C669-429C-A9CE-2B4936903A3A":1,"434A9290-0B51-4E4C-AC07-9FCA1ED8C69C":1,"01354520-B8E3-465E-8C1A-
2024-10-04 14:44:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 2d 34 45 42 32 2d 41 44 37 42 2d 36 42 46 30 32 45 31 44 44 43 30 31 22 3a 31 2c 22 36 33 44 43 44 43 35 32 2d 41 37 36 35 2d 34 45 35 38 2d 42 34 43 31 2d 46 31 34 41 44 38 30 36 30 44 38 31 22 3a 31 2c 22 45 41 39 46 42 41 46 32 2d 44 34 38 38 2d 34 46 43 33 2d 38 35 37 36 2d 43 38 43 46 42 33 46 38 30 45 39 35 22 3a 31 2c 22 30 30 30 45 44 39 39 42 2d 42 39 31 30 2d 34 45 37 46 2d 39 34 32 36 2d 36 31 41 41 44 35 38 44 37 36 37 30 22 3a 31 2c 22 36 42 36 43 46 32 46 43 2d 34 31 45 45 2d 34 44 42 30 2d 39 45 43 44 2d 34 43 43 34 37 44 32 45 30 43 46 38 22 3a 31 2c 22 32 44 42 33 35 31 36 44 2d 36 46 44 36 2d 34 38 37 31 2d 39 42 37 46 2d 42 33 46 36 36 31 41 30 39 31 44 32 22 3a 31 2c 22 35 38 30 36 41 46 34 43 2d 44 37 33 42 2d 34 37 Data Ascii: 2000-4EB2-AD7B-6BF02E1DDC01":1,"63DCDC52-A765-4E58-B4C1-F14AD8060D81":1,"EA9FBAF2-D488-4FC3-8576-C8CFB3F80E95":1,"000ED99B-B910-4E7F-9426-61AAD58D7670":1,"6B6CF2FC-41EE-4DB0-9ECD-4CC47D2E0CF8":1,"2DB3516D-6FD6-4871-9B7F-B3F661A091D2":1,"5806AF4C-D73B-47
2024-10-04 14:44:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 35 31 45 2d 44 42 44 42 2d 34 33 33 31 2d 39 46 41 43 2d 46 42 32 35 45 32 41 38 45 39 30 43 22 3a 31 2c 22 42 43 30 34 36 35 44 41 2d 43 34 41 31 2d 34 46 31 33 2d 38 30 32 43 2d 31 31 30 31 37 45 33 31 46 44 41 33 22 3a 31 2c 22 43 30 30 32 42 31 41 36 2d 36 44 46 35 2d 34 43 38 46 2d 39 34 30 42 2d 46 30 37 37 36 39 33 37 30 41 45 38 22 3a 31 2c 22 46 42 36 30 46 45 30 45 2d 38 30 37 33 2d 34 46 31 32 2d 41 32 35 35 2d 34 35 35 39 43 46 46 32 41 32 44 35 22 3a 31 2c 22 37 41 39 31 34 46 31 37 2d 33 39 33 41 2d 34 44 42 38 2d 39 33 32 38 2d 34 45 36 42 31 31 44 42 31 32 43 44 22 3a 31 2c 22 41 35 35 41 31 32 30 37 2d 38 30 35 35 2d 34 31 42 30 2d 38 38 35 35 2d 35 43 37 46 35 41 32 42 39 46 39 36 22 3a 31 2c 22 34 45 44 35 43 37 45 46 Data Ascii: 200051E-DBDB-4331-9FAC-FB25E2A8E90C":1,"BC0465DA-C4A1-4F13-802C-11017E31FDA3":1,"C002B1A6-6DF5-4C8F-940B-F07769370AE8":1,"FB60FE0E-8073-4F12-A255-4559CFF2A2D5":1,"7A914F17-393A-4DB8-9328-4E6B11DB12CD":1,"A55A1207-8055-41B0-8855-5C7F5A2B9F96":1,"4ED5C7EF
2024-10-04 14:44:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 31 2c 22 30 32 46 44 44 42 31 44 2d 30 38 32 34 2d 34 34 34 32 2d 38 35 34 32 2d 36 36 31 33 46 34 45 35 31 42 45 35 22 3a 31 2c 22 46 36 46 46 45 36 31 34 2d 42 44 46 33 2d 34 39 38 33 2d 41 44 34 32 2d 39 31 36 42 37 43 36 31 43 32 46 42 22 3a 31 2c 22 30 42 45 41 39 44 32 33 2d 38 30 34 46 2d 34 31 45 31 2d 39 41 41 30 2d 36 32 44 34 35 37 41 33 30 42 43 45 22 3a 31 2c 22 42 36 36 45 43 35 46 44 2d 36 37 41 41 2d 34 37 39 31 2d 39 33 31 43 2d 43 32 45 46 41 46 45 34 38 31 34 34 22 3a 31 2c 22 37 41 44 46 43 34 39 42 2d 35 31 37 45 2d 34 44 42 36 2d 38 45 39 45 2d 36 36 44 43 45 30 41 45 34 38 32 33 22 3a 31 2c 22 35 46 44 39 32 46 32 31 2d 35 38 31 42 2d 34 33 35 34 2d 41 39 35 31 2d 46 32 33 44 30 38 46 31 31 46 34 42 22 3a 31 2c 22 Data Ascii: 20001,"02FDDB1D-0824-4442-8542-6613F4E51BE5":1,"F6FFE614-BDF3-4983-AD42-916B7C61C2FB":1,"0BEA9D23-804F-41E1-9AA0-62D457A30BCE":1,"B66EC5FD-67AA-4791-931C-C2EFAFE48144":1,"7ADFC49B-517E-4DB6-8E9E-66DCE0AE4823":1,"5FD92F21-581B-4354-A951-F23D08F11F4B":1,"
2024-10-04 14:44:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 44 46 44 30 34 41 22 3a 31 2c 22 38 38 32 43 30 41 44 38 2d 35 45 45 39 2d 34 33 39 42 2d 42 43 35 31 2d 31 31 31 34 43 37 45 33 34 31 33 41 22 3a 31 2c 22 42 35 46 44 42 36 33 31 2d 45 35 33 43 2d 34 31 30 43 2d 41 45 33 42 2d 37 37 45 37 44 30 43 39 31 42 30 44 22 3a 31 2c 22 39 46 39 43 33 34 33 41 2d 36 46 39 37 2d 34 44 43 43 2d 39 39 30 46 2d 31 35 45 37 38 38 44 33 43 41 30 36 22 3a 31 2c 22 33 41 46 41 44 34 37 34 2d 34 35 46 30 2d 34 42 34 45 2d 38 41 41 32 2d 41 46 41 38 42 38 32 38 43 30 43 44 22 3a 31 2c 22 32 43 45 39 37 39 41 41 2d 46 45 31 38 2d 34 36 37 31 2d 42 32 44 35 2d 42 31 41 43 43 33 42 39 30 34 46 32 22 3a 31 2c 22 34 45 41 32 41 35 43 36 2d 32 32 36 30 2d 34 39 38 32 2d 42 43 36 42 2d 43 42 42 39 46 42 42 31 43 Data Ascii: 2000DFD04A":1,"882C0AD8-5EE9-439B-BC51-1114C7E3413A":1,"B5FDB631-E53C-410C-AE3B-77E7D0C91B0D":1,"9F9C343A-6F97-4DCC-990F-15E788D3CA06":1,"3AFAD474-45F0-4B4E-8AA2-AFA8B828C0CD":1,"2CE979AA-FE18-4671-B2D5-B1ACC3B904F2":1,"4EA2A5C6-2260-4982-BC6B-CBB9FBB1C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:50 UTC	720	OUT	POST /o/RemoteTelemetry.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 115 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://vestliaresort-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://vestliaresort-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:44:50 UTC	115	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 4a 53 41 50 49 5f 53 54 41 54 45 22 2c 22 70 61 79 6c 6f 61 64 4a 73 6f 6e 22 3a 22 7b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 22 3a 5c 22 4f 6e 65 4e 6f 74 65 5c 22 2c 5c 22 62 75 69 6c 64 5c 22 3a 5c 22 23 23 23 56 45 52 53 49 4f 4e 23 23 23 5c 22 2c 5c 22 73 74 61 74 65 5c 22 3a 5c 22 69 6e 69 74 5c 22 7d 22 7d Data Ascii: {"type":"JSAPI_STATE","payloadJson":"{\"application\":\"OneNote\",\"build\":\"###VERSION###\",\"state\":\"init\"}"}
2024-10-04 14:44:51 UTC	1061	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 772fe5bd-1efc-4c5d-8ab5-9b5330906830 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: AM1PEPF000006C5 X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU2 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://vestliaresort-my.sharepoint.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: AM1PEPF000006C5 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_excelslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 937E20F11F2A4A97BEC704A1E09897C2 Ref B: EWR311000107017 Ref C: 2024-10-04T14:44:50Z Date: Fri, 04 Oct 2024 14:44:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 14:44:51 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=180022 Date: Fri, 04 Oct 2024 14:44:51 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49723	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:51 UTC	732	OUT	POST /suite/RemoteUls.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&officeserverversion= HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 706 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://vestliaresort-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://vestliaresort-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:44:51 UTC	706	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 38 30 35 33 30 38 39 34 35 39 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 32 31 31 36 34 32 33 38 2c 22 54 22 3a 31 35 2c 22 4d 22 3a 22 4f 6e 65 4e 6f 74 65 4a 73 41 70 69 56 32 47 61 74 65 3a 20 44 69 73 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 36 35 37 38 35 38 34 2c 22 54 22 3a 31 36 2c 22 4d 22 3a 22 4c 65 61 6e 20 55 69 20 48 6f 73 74 3a 20 62 6f 6f 74 41 70 70 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 36 31 38 32 30 34 38 2c 22 54 22 3a 31 38 2c 22 4d 22 3a 22 42 6f 6f 74 41 70 70 3a 20 4c 6f 61 64 20 64 6f 63 75 6d 65 6e 74 20 72 65 74 75 72 6e 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 35 33 37 32 36 32 38 Data Ascii: {"T":1728053089459,"L":[{"G":521164238,"T":15,"M":"OneNoteJsApiV2Gate: Disabled","C":3027,"D":50},{"G":576578584,"T":16,"M":"Lean Ui Host: bootApp","C":3027,"D":50},{"G":546182048,"T":18,"M":"BootApp: Load document returned","C":3027,"D":50},{"G":55372628
2024-10-04 14:44:51 UTC	4466	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS4-ARRAffinity=138eaf150ed71b9d882f9d83bb887c8c323305622c3baddca40398369a9eaca5;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned; httponly X-CorrelationId: 0761847c-23fa-4fec-846d-ba503bbb0ee0 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 X-OfficeFE: BL6PEPF00022308 X-OfficeVersion: 16.0.18123.41000 X-OfficeCluster: PUS4 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://vestliaresort-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 03ED953A90AE1A5E8FFD1D650B1E74C0E54D7AFE X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF00021C9D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest X-MSEdge-Ref: Ref A: 05BABC65D5DE4FFF87C6B81660BB5150 Ref B: EWR311000102009 Ref C: 2024-10-04T14:44:51Z Date: Fri, 04 Oct 2024 14:44:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49725	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:51 UTC	732	OUT	POST /suite/RemoteUls.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&officeserverversion= HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 203 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://vestliaresort-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://vestliaresort-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:44:51 UTC	203	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 38 30 35 33 30 38 39 35 31 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 39 36 31 32 38 30 32 2c 22 54 22 3a 36 2c 22 4d 22 3a 22 55 70 64 61 74 65 64 20 48 65 61 6c 74 68 20 65 6e 64 70 6f 69 6e 74 2e 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 3a 20 50 52 4f 44 55 43 54 49 4f 4e 2c 20 44 61 74 61 42 6f 75 6e 64 61 72 79 3a 20 31 2c 20 52 65 67 69 6f 6e 3a 20 45 55 43 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 37 30 66 64 37 63 36 2d 30 63 37 31 2d 65 33 35 31 2d 65 66 62 62 2d 64 66 33 61 65 38 30 36 63 63 38 38 22 2c 22 49 22 3a 32 2c 22 56 22 3a 31 7d Data Ascii: {"T":1728053089517,"L":[{"G":509612802,"T":6,"M":"Updated Health endpoint. Environment: PRODUCTION, DataBoundary: 1, Region: EUC","C":3027,"D":50}],"S":"d70fd7c6-0c71-e351-efbb-df3ae806cc88","I":2,"V":1}
2024-10-04 14:44:51 UTC	4439	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS4-ARRAffinity=9e805a5f96cc95a15e79945fbcbc95bd4e8c8f2e31f395ba5c89393619f11322;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned; httponly X-CorrelationId: da102b7e-95ed-4fa4-b357-9923772e01d2 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 X-OfficeFE: BL6PEPF000222CB X-OfficeVersion: 16.0.18123.41000 X-OfficeCluster: PUS4 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://vestliaresort-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 03ED953A90AE1A5E8FFD1D650B1E74C0E54D7AFE X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF00021CAD X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: F0956A1954B048ECB7D58CEC558CE584 Ref B: EWR311000107035 Ref C: 2024-10-04T14:44:51Z Date: Fri, 04 Oct 2024 14:44:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49724	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:51 UTC	714	OUT	POST /suite/RemoteTelemetry.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88 HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 683 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://vestliaresort-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://vestliaresort-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:44:51 UTC	683	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 55 6e 69 66 69 65 64 55 69 48 6f 73 74 22 2c 22 64 22 3a 22 55 4e 49 46 49 45 44 55 49 48 4f 53 54 22 2c 22 6a 22 3a 22 32 30 32 34 31 30 30 32 2e 35 22 2c 22 72 22 3a 66 61 6c 73 65 2c 22 73 22 3a 22 22 2c 22 77 22 3a 22 64 37 30 66 64 37 63 36 2d 30 63 37 31 2d 65 33 35 31 2d 65 66 62 62 2d 64 66 33 61 65 38 30 36 63 63 38 38 22 2c 22 78 22 3a 22 53 68 61 72 69 6e 67 2e 43 6c 69 65 6e 74 52 65 64 69 72 65 63 74 22 2c 22 79 22 3a 22 31 64 37 33 66 33 34 61 2d 33 62 37 35 2d 34 37 64 63 2d 39 38 63 65 2d 31 36 38 65 62 63 63 36 32 31 32 63 22 2c 22 7a 22 3a 22 73 68 61 72 65 70 6f 69 6e 74 63 6f 6d 22 2c 22 61 63 22 3a 22 64 6f 63 61 73 70 78 22 Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"UnifiedUiHost","d":"UNIFIEDUIHOST","j":"20241002.5","r":false,"s":"","w":"d70fd7c6-0c71-e351-efbb-df3ae806cc88","x":"Sharing.ClientRedirect","y":"1d73f34a-3b75-47dc-98ce-168ebcc6212c","z":"sharepointcom","ac":"docaspx"
2024-10-04 14:44:51 UTC	1220	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS13-ARRAffinity=70d8b0965c84b544d70a54c79ac71db1b279f5179720b4bf7cad7255d599a6ed;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned; httponly X-CorrelationId: 3e25f416-4c31-41fe-805b-8c5d41886144 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 X-OfficeFE: BL6PEPF0001FC2A X-OfficeVersion: 16.0.18123.41000 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://vestliaresort-my.sharepoint.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A15F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: AF3AD376B4474CD3B2B501083CC5DD43 Ref B: EWR311000107009 Ref C: 2024-10-04T14:44:51Z Date: Fri, 04 Oct 2024 14:44:51 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49726	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:51 UTC	736	OUT	POST /o/RemoteUls.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&officeserverversion= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 5778 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://vestliaresort-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://vestliaresort-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:44:51 UTC	5778	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 38 30 35 33 30 38 39 35 36 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 36 34 34 34 32 33 38 2c 22 54 22 3a 34 2c 22 4d 22 3a 22 48 6f 73 74 49 6e 69 74 44 69 61 67 6e 6f 73 74 69 63 73 3a 20 7b 5c 22 65 6e 74 72 79 50 6f 69 6e 74 5c 22 3a 5c 22 53 68 61 72 69 6e 67 2e 43 6c 69 65 6e 74 52 65 64 69 72 65 63 74 5c 22 2c 5c 22 68 6f 73 74 50 61 67 65 46 69 72 73 74 46 6c 75 73 68 54 69 6d 65 5c 22 3a 31 37 32 38 30 35 33 30 38 38 30 30 39 2c 5c 22 75 73 65 72 43 6c 69 63 6b 54 69 6d 65 5c 22 3a 31 37 32 38 30 35 33 30 38 35 37 38 32 2c 5c 22 6f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 53 74 61 72 74 54 69 6d 65 5c 22 3a 31 37 32 38 30 35 33 30 38 39 34 38 35 2c 5c 22 6f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 45 6e Data Ascii: {"T":1728053089567,"L":[{"G":596444238,"T":4,"M":"HostInitDiagnostics: {\"entryPoint\":\"Sharing.ClientRedirect\",\"hostPageFirstFlushTime\":1728053088009,\"userClickTime\":1728053085782,\"officeBootstrapperStartTime\":1728053089485,\"officeBootstrapperEn
2024-10-04 14:44:51 UTC	4622	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 5d5bc6c4-c1dc-4cc1-8656-d82aef8adb55 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: PA1PEPF00035E9B X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU9 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://vestliaresort-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 03ED953A90AE1A5E8FFD1D650B1E74C0E54D7AFE X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: PA1PEPF00035E9B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 8F5B0137E158436AA8EEFB385674C25C Ref B: EWR311000107023 Ref C: 2024-10-04T14:44:51Z Date: Fri, 04 Oct 2024 14:44:51 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49727	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:51 UTC	1584	OUT	POST /o/onenoteframe.aspx?ui=en-US&rs=nb-NO&wopisrc=https%3A%2F%2Fvestliaresort-my.sharepoint.com%2Fpersonal%2Fziga_vestlia_no%2F_vti_bin%2Fwopi.ashx%2Ffolders%2Fd1efb94cab344e6984f394b21386b077&wdenableroaming=1&mscc=1&wdodb=1&hid=A6A256A1-20A3-A000-26C1-E4F692F076A8.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fvestliaresort-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1728053085782&jsapi=1&jsapiver=v1&newsession=1&corrid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 10800 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://vestliaresort-my.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://vestliaresort-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:44:51 UTC	10800	OUT	Data Raw: 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 49 73 49 6e 67 31 64 43 49 36 49 6e 56 59 5a 57 68 52 53 6c 42 73 5a 56 5a 71 54 6b 4e 69 59 57 74 56 61 45 64 45 4e 6b 6c 35 52 6c 46 52 61 79 4a 39 2e 65 79 4a 68 64 57 51 69 4f 69 4a 33 62 33 42 70 4c 33 5a 6c 63 33 52 73 61 57 46 79 5a 58 4e 76 63 6e 51 74 62 58 6b 75 63 32 68 68 63 6d 56 77 62 32 6c 75 64 43 35 6a 62 32 31 41 4d 57 51 33 4d 32 59 7a 4e 47 45 74 4d 32 49 33 4e 53 30 30 4e 32 52 6a 4c 54 6b 34 59 32 55 74 4d 54 59 34 5a 57 4a 6a 59 7a 59 79 4d 54 4a 6a 49 69 77 69 61 58 4e 7a 49 6a 6f 69 4d 44 41 77 4d 44 41 77 4d 44 4d 74 4d 44 41 77 4d 43 30 77 5a 6d 59 78 4c 57 4e 6c 4d 44 41 74 4d 44 41 77 4d Data Ascii: access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6InVYZWhRSlBsZVZqTkNiYWtVaEdENkl5RlFRayJ9.eyJhdWQiOiJ3b3BpL3Zlc3RsaWFyZXNvcnQtbXkuc2hhcmVwb2ludC5jb21AMWQ3M2YzNGEtM2I3NS00N2RjLTk4Y2UtMTY4ZWJjYzYyMTJjIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwM
2024-10-04 14:44:51 UTC	5990	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure; partitioned X-CorrelationId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * Origin-Trial: AtFKAQdG+ydQM/bvbc5Qxv930XARVdP6iEmsQLrizs1HYDZnXMf7/f8oOaknwmnnXoTmlFWim3Ptj/bW7MfeElEAAABteyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOnRydWUsImZlYXR1cmUiOiJIYXB0aWNzRGV2aWNlIiwiZXhwaXJ5IjoxNzQ0MzA5NDUyfQ== Origin-Trial: AhQJUzE5LCv5KHvmQov3fZhTT0W3oRbJWD7uk+pw4EemPcV5dWZzr8wiGtZj/dh81uDAw0I9lZ30j8otVRSRQwYAAABkeyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Origin-Agent-Cluster: ?1 X-OfficeFE: AM4PEPF0000B70C X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU8 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff Content-Security-Policy-Report-Only: font-src data: 'self' c1-onenote-15.cdn.office.net .skype.com .skypeassets.com .msocdn.com sway.com .sway-cdn.com sway-cdn.com .sharepointonline.com spoprod-a.akamaihd.net .azureedge.net fs.microsoft.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net .microsoft.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' c1-onenote-15.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net c1-officeapps-15.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net .growth.office.net *.rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lif [TRUNCATED] Document-Policy: js-profiling Reporting-Endpoints: default="https://euc-onenote.officeapps.live.com/o/BrowserReportingHandler.ashx" nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5a&DC=GEU8&FileSource=SharePointOnline"}]} server-timing: prerender;dur=24,render;dur=3,total;dur=27 X-OFFICEFD: AM4PEPF0000B70C X-WacFrontEnd: AM4PEPF0000B70C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 368D875193EF4971B298F93204DDA55F Ref B: EWR311000101023 Ref C: 2024-10-04T14:44:51Z Date: Fri, 04 Oct 2024 14:44:51 GMT Connection: close
2024-10-04 14:44:51 UTC	1076	IN	Data Raw: 34 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 76 61 72 20 67 5f 66 69 72 73 74 42 79 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 20 66 75 6e 63 74 69 6f 6e 20 68 69 67 68 52 65 73 54 69 6d 65 53 74 61 6d 70 28 29 20 7b 20 69 66 20 28 70 65 72 66 Data Ascii: 42d<!DOCTYPE html><html><head><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><script type="text/javascript"> var g_firstByte = new Date(); function highResTimeStamp() { if (perf
2024-10-04 14:44:51 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 44 6f 77 6e 49 6e 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 35 2c 31 2e 31 35 2c 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 35 2c 31 2e 31 35 2c 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 35 2c 31 2e 31 35 2c 31 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 31 2e 31 35 2c 31 2e 31 35 2c 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 3b 2d Data Ascii: 2000);-webkit-transform:scaleX(1);-moz-transform:scaleX(1)}}@keyframes scaleDownIn{from{transform:scale3d(1.15,1.15,1);-ms-transform:scale3d(1.15,1.15,1);-webkit-transform:scale3d(1.15,1.15,1);-moz-transform:scale3d(1.15,1.15,1)}to{transform:scaleX(1);-
2024-10-04 14:44:51 UTC	1475	IN	Data Raw: 35 62 63 0d 0a 30 30 25 3b 77 69 64 74 68 3a 31 32 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 3b 72 69 67 68 74 3a 32 70 78 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 4f 6c 64 53 65 63 74 69 6f 6e 43 6f 6c 75 6d 6e 53 68 61 64 6f 77 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 34 29 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 32 70 78 3b 74 6f 70 3a 33 37 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 3b 72 69 67 68 74 3a 32 30 30 70 78 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 53 65 63 74 69 6f 6e 43 6f 6c 75 6d 6e 53 68 61 Data Ascii: 5bc00%;width:12px;z-index:100;right:2px;} .skeletalOldSectionColumnShadow {background: linear-gradient(to right, rgba(0, 0, 0, 0), rgba(0, 0, 0, 0.04));position:absolute;height:100%;width:12px;top:37px;z-index:100;right:200px;} .skeletalSectionColumnSha
2024-10-04 14:44:51 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 32 64 32 64 32 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 50 6f 73 69 74 69 6f 6e 52 65 77 72 69 74 65 4e 61 76 70 61 6e 65 53 65 63 74 69 6f 6e 43 6f 6c 75 6d 6e 20 7b 77 69 64 74 68 3a 31 38 38 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 32 64 32 64 32 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: 2000r-right:1px solid #d2d2d2;height:100%;position:relative;display:inline-flex;} .skeletalPositionRewriteNavpaneSectionColumn {width:188px;display:inline-flex;border-right:1px solid #d2d2d2;height:100%;position:relative;display:inline-flex; background-
2024-10-04 14:44:51 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 30 32 44 32 38 35 35 43 38 41 35 34 31 37 43 44 5f 72 65 73 6f 75 72 63 65 73 2f 31 30 33 33 2f 42 6c 61 6e 6b 31 30 78 31 30 2e 67 69 66 27 29 7d 2e 4e 61 76 48 69 65 72 61 72 63 68 79 2e 4e 61 76 48 69 65 72 61 72 63 68 79 4c 6f 61 64 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 63 31 2d 6f 6e 65 6e 6f 74 65 2d 31 35 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 3a 34 34 33 2f 6f 2f 73 2f 68 33 38 45 38 38 42 36 41 46 36 43 36 35 33 31 39 5f 72 65 73 6f 75 72 63 65 73 2f 31 30 33 33 2f 70 72 6f 67 72 65 73 73 31 36 2e 67 69 66 27 29 7d 3c 2f 73 74 79 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 68 72 Data Ascii: 200002D2855C8A5417CD_resources/1033/Blank10x10.gif')}.NavHierarchy.NavHierarchyLoading{background-image:url('https://c1-onenote-15.cdn.office.net:443/o/s/h38E88B6AF6C65319_resources/1033/progress16.gif')}</style><link rel='stylesheet' type='text/css' hr
2024-10-04 14:44:51 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 66 65 72 2d 31 32 34 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 62 75 66 66 65 72 2c 30 29 7d 2e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 50 6c 61 63 65 68 6f 6c 64 65 72 42 75 66 66 65 72 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 50 6c 61 63 65 68 6f 6c 64 65 72 42 75 66 66 65 72 2d 31 32 34 7b 2d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 62 75 66 66 65 72 3a 34 38 70 78 7d 2e 73 65 61 72 63 68 48 69 64 64 65 6e 2d 31 32 35 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 69 67 6e 49 6e 2d 31 32 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 38 70 78 7d 2e 75 70 73 65 6c 6c 43 6f 6e 74 61 69 6e 65 72 2d 31 32 37 7b 70 61 64 64 69 6e 67 2d Data Ascii: 2000fer-124{width:var(--notification-placeholder-buffer,0)}.NotificationPlaceholderBuffer .notificationPlaceholderBuffer-124{--notification-placeholder-buffer:48px}.searchHidden-125{display:none}.signIn-126{padding-left:8px}.upsellContainer-127{padding-
2024-10-04 14:44:51 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 53 65 70 61 72 61 74 6f 72 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 35 33 34 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 53 65 70 61 72 61 74 6f 72 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 31 31 35 39 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 53 65 70 61 72 61 74 6f 72 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 31 32 31 35 70 78 22 3e 3c 2f 73 70 61 6e 3e Data Ascii: 2000 class="skeletalRibbonSeparator" role="presentation" style="left:534px"></span><span class="skeletalRibbonSeparator" role="presentation" style="left:1159px"></span><span class="skeletalRibbonSeparator" role="presentation" style="left:1215px"></span>
2024-10-04 14:44:52 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 55 6e 69 74 20 73 6b 65 6c 65 74 61 6c 43 61 6e 76 61 73 4c 6f 6e 67 55 6e 69 74 20 73 6b 65 6c 65 74 61 6c 43 61 6e 76 61 73 46 69 72 73 74 43 6f 6c 75 6d 6e 55 6e 69 74 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 31 30 34 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 31 2e 33 36 37 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 34 73 3b 77 69 64 74 68 3a 36 30 31 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 55 6e 69 74 20 73 6b 65 6c 65 74 61 6c 43 61 6e 76 61 73 4c 6f 6e 67 55 6e 69 74 20 73 6b 65 6c 65 74 61 6c 43 61 6e 76 61 73 46 Data Ascii: 2000an><span class="skeletalUnit skeletalCanvasLongUnit skeletalCanvasFirstColumnUnit" role="presentation" style="top:104px;animation-delay:1.367s;animation-duration:4s;width:601px"></span><span class="skeletalUnit skeletalCanvasLongUnit skeletalCanvasF
2024-10-04 14:44:52 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 69 49 73 49 6d 35 69 5a 69 49 36 49 6a 45 33 4d 6a 67 77 4e 54 4d 77 4f 44 67 69 4c 43 4a 6c 65 48 41 69 4f 69 49 78 4e 7a 49 34 4d 44 67 35 4d 44 67 34 49 69 77 69 62 6d 46 74 5a 57 6c 6b 49 6a 6f 69 4d 43 4d 75 5a 6e 78 74 5a 57 31 69 5a 58 4a 7a 61 47 6c 77 66 48 56 79 62 69 55 7a 59 58 4e 77 62 79 55 7a 59 57 46 75 62 32 34 6a 4e 7a 46 6d 4d 7a 4d 35 4e 7a 4a 6d 59 32 4a 6a 59 54 68 69 4f 54 51 34 4e 47 49 30 5a 44 64 6a 4f 57 56 6a 5a 6d 4a 69 5a 54 6b 35 4d 57 4e 69 4d 32 55 34 4d 6a 42 6c 59 7a 5a 6b 4e 44 4d 7a 4e 54 52 6c 59 54 49 79 4d 47 49 32 4f 57 59 7a 4e 54 41 77 4e 43 49 73 49 6d 35 70 61 53 49 36 49 6d 31 70 59 33 4a 76 63 32 39 6d 64 43 35 7a 61 47 46 79 5a 58 42 76 61 57 35 30 49 69 77 69 61 58 4e 31 63 32 56 79 49 6a Data Ascii: 2000iIsIm5iZiI6IjE3MjgwNTMwODgiLCJleHAiOiIxNzI4MDg5MDg4IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jNzFmMzM5NzJmY2JjYThiOTQ4NGI0ZDdjOWVjZmJiZTk5MWNiM2U4MjBlYzZkNDMzNTRlYTIyMGI2OWYzNTAwNCIsIm5paSI6Im1pY3Jvc29mdC5zaGFyZXBvaW50IiwiaXN1c2VyIj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49729	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 14:44:52 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=180096 Date: Fri, 04 Oct 2024 14:44:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-04 14:44:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49730	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:52 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:52 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:52 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 30 Sep 2024 13:16:38 GMT ETag: "0x8DCE1521DF74B57" x-ms-request-id: 90766f9b-701e-006f-578c-15afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144452Z-15767c5fc55d6fcl6x6bw8cpdc0000000cm000000000bchr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:52 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-04 14:44:52 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-04 14:44:52 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-04 14:44:52 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-04 14:44:52 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-04 14:44:52 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-04 14:44:52 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-04 14:44:53 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-04 14:44:53 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-04 14:44:53 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49737	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:52 UTC	416	OUT	GET /suite/RemoteTelemetry.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88 HTTP/1.1 Host: common.online.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:44:52 UTC	1173	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS8-ARRAffinity=3432ddebaaa744da4447d9f7f711c72602c2ec1cfe754982c1c9634468b36fed;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned; httponly X-CorrelationId: da4ec51b-2650-4a72-95a3-1125e9bf2ce7 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 X-OfficeFE: BL6PEPF0001334F X-OfficeVersion: 16.0.18123.41000 X-OfficeCluster: PUS8 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF00009B24 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 06E2FFC50D914C47913442F41DB2E347 Ref B: EWR311000102047 Ref C: 2024-10-04T14:44:52Z Date: Fri, 04 Oct 2024 14:44:52 GMT Connection: close
2024-10-04 14:44:52 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-10-04 14:44:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49738	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:53 UTC	2560	OUT	POST /o/RemoteUls.ashx?build=16.0.18006.41011&waccluster=GEU8&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":0,"Value":"SessionStarted","Type":"SessionBoundary"},{"Index":1,"MsSinceStart":2,"Value":"https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=nb-NO&wopisrc=https%3A%2F%2Fvestliaresort-my.sharepoint.com%2Fpersonal%2Fziga_vestlia_no%2F_vti_bin%2Fwopi.ashx%2Ffolders%2Fd1efb94cab344e6984f394b21386b077&wdenableroaming=1&mscc=1&wdodb=1&hid=A6A256A1-20A3-A000-26C1-E4F692F076A8.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fvestliaresort-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1728053085782&jsapi=1&jsapiver=v1&newsession=1&corrid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=nb-NO&wopisrc=https%3A%2F%2Fvestliaresort-my.sharepoint.com%2Fpersonal%2Fziga_vestlia_no%2F_vti_bin%2Fwopi.ashx%2Ffolders%2Fd1efb94cab344e6984f394b21386b077&wdenableroaming=1&mscc=1&wdodb=1&hid=A6A256A1-20A3-A000-26C1-E4F692F076A8.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fvestliaresort-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1728053085782&jsapi=1&jsapiver=v1&newsession=1&corrid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-04 14:44:53 UTC	1581	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 03e485a8-616f-4a3a-b258-b412061c9ee5 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: AM4PEPF0000B00C X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU8 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5c&DC=GEU8&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: AM4PEPF0000B00C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 18CA2623AA2944158959CA3AC453F6E2 Ref B: EWR311000105009 Ref C: 2024-10-04T14:44:53Z Date: Fri, 04 Oct 2024 14:44:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49748	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:55 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:55 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 39d43082-801e-00ac-658c-15fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144455Z-15767c5fc55jdxmppy6cmd24bn00000004zg000000003pc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:55 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49745	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:55 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:55 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1cc2ff82-e01e-0071-478c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144455Z-15767c5fc55n4msds84xh4z67w00000006f0000000000c7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:55 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49749	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:55 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:55 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:55 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 4b0a31e7-c01e-00ad-448c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144455Z-15767c5fc55852fxfeh7csa2dn0000000ceg00000000v89s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:55 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49747	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:55 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:55 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9d87bc3-001e-008d-128c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144455Z-15767c5fc55rg5b7sh1vuv8t7n0000000d3g0000000009tv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:55 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49746	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:55 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:55 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:55 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: b9d87bc4-001e-008d-138c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144455Z-15767c5fc55tsfp92w7yna557w0000000ckg00000000t26r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:55 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49755	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:55 UTC	452	OUT	GET /o/RemoteUls.ashx?build=16.0.18006.41011&waccluster=GEU8&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:44:56 UTC	4442	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 3d417aae-892e-4a8d-acc0-46cde889dde6 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: AM4PEPF0000B708 X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU8 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 03ED953A90AE1A5E8FFD1D650B1E74C0E54D7AFE X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=GEU8&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: AM4PEPF0000B708 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 5D4635098C4540448967663273E22AEF Ref B: EWR311000108033 Ref C: 2024-10-04T14:44:55Z Date: Fri, 04 Oct 2024 14:44:55 GMT Connection: close
2024-10-04 14:44:56 UTC	403	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int
2024-10-04 14:44:56 UTC	805	IN	Data Raw: 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 Data Ascii: d:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49763	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:55 UTC	2568	OUT	POST /o/RemoteUls.ashx?build=16.0.18006.41011&waccluster=GEU8&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":2869,"Value":"Making GetCells Request","Type":"BootLogs"},{"Index":2,"MsSinceStart":2869,"Value":"https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=nb-NO&wopisrc=https%3A%2F%2Fvestliaresort-my.sharepoint.com%2Fpersonal%2Fziga_vestlia_no%2F_vti_bin%2Fwopi.ashx%2Ffolders%2Fd1efb94cab344e6984f394b21386b077&wdenableroaming=1&mscc=1&wdodb=1&hid=A6A256A1-20A3-A000-26C1-E4F692F076A8.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fvestliaresort-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1728053085782&jsapi=1&jsapiver=v1&newsession=1&corrid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=nb-NO&wopisrc=https%3A%2F%2Fvestliaresort-my.sharepoint.com%2Fpersonal%2Fziga_vestlia_no%2F_vti_bin%2Fwopi.ashx%2Ffolders%2Fd1efb94cab344e6984f394b21386b077&wdenableroaming=1&mscc=1&wdodb=1&hid=A6A256A1-20A3-A000-26C1-E4F692F076A8.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fvestliaresort-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1728053085782&jsapi=1&jsapiver=v1&newsession=1&corrid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-04 14:44:56 UTC	1566	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: d907a519-1da3-4994-a638-e565c9070796 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: AM4PEPF0000B00D X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU8 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=GEU8&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: AM4PEPF0000B00D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: A49F423191B6499394F369CE49ED12E4 Ref B: EWR311000107045 Ref C: 2024-10-04T14:44:55Z Date: Fri, 04 Oct 2024 14:44:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49764	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:55 UTC	3644	OUT	POST /o/OneNote.ashx HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 4756 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-ServerSideRendering: RenderingNoImages X-OfficeVersion: 16.0.18006.41011 X-Key: 11zBOty2qPAoVxOW98DBIM4A5ABpQmn5UQibMPr2glo=;bgivVoqLCu3pO6YcHCwLg8MzyCWXEZPfXHfzVAbsEak=,638636498917443714 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 X-SessionStartDimensions: {"Application":"OneNote","Browser":"Chrome","BrowserMajorVersion":"117","BrowserVersion":"117.0.0","Host":"SharePoint Online","IsSynthetic":"False","Os":"Windows","Ring":"5","RoutedVia":"AzureFrontDoor","SessionOrigin":"SHARING.CLIENTREDIRECT","UiHost":"sharepointcom","UserSessionApplicationMode":"Edit","WACDatacenter":"GEU8"} sec-ch-ua-platform: "Windows" X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6InVYZWhRSlBsZVZqTkNiYWtVaEdENkl5RlFRayJ9.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 [TRUNCATED] X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 X-UserType: WOPI X-WacCluster: GEU8 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=nb-NO&wopisrc=https%3A%2F%2Fvestliaresort-my.sharepoint.com%2Fpersonal%2Fziga_vestlia_no%2F_vti_bin%2Fwopi.ashx%2Ffolders%2Fd1efb94cab344e6984f394b21386b077&wdenableroaming=1&mscc=1&wdodb=1&hid=A6A256A1-20A3-A000-26C1-E4F692F076A8.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fvestliaresort-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1728053085782&jsapi=1&jsapiver=v1&newsession=1&corrid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-04 14:44:55 UTC	4756	OUT	Data Raw: 7b 22 4d 6f 64 65 22 3a 31 2c 22 73 72 73 22 3a 5b 5b 31 2c 7b 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 49 73 72 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 76 65 73 74 6c 69 61 72 65 73 6f 72 74 25 32 44 6d 79 25 32 45 73 68 61 72 65 70 6f 69 6e 74 25 32 45 63 6f 6d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 7a 69 67 61 25 35 46 76 65 73 74 6c 69 61 25 35 46 6e 6f 25 32 46 25 35 46 76 74 69 25 35 46 62 69 6e 25 32 46 77 6f 70 69 25 32 45 61 73 68 78 25 32 46 66 6f 6c 64 65 72 73 25 32 46 64 31 65 66 62 39 34 63 61 62 33 34 34 65 36 39 38 34 66 33 39 34 62 32 31 33 38 36 62 30 37 37 26 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 49 73 49 6e 67 31 64 43 49 36 Data Ascii: {"Mode":1,"srs":[[1,{"FileId":"WOPIsrc=https%3A%2F%2Fvestliaresort%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fziga%5Fvestlia%5Fno%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2Fd1efb94cab344e6984f394b21386b077&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6
2024-10-04 14:44:56 UTC	1091	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 83943 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 6ff3e9d6-9403-4c2c-b4d9-11911d5b3c27 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: AM4PEPF0000B00D X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU8 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: AM4PEPF0000B00D X-WacFrontEnd: AM4PEPF0000B00D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: ADF866E0A7484BE2A290357556F7ECE0 Ref B: EWR311000103049 Ref C: 2024-10-04T14:44:55Z Date: Fri, 04 Oct 2024 14:44:56 GMT Connection: close
2024-10-04 14:44:56 UTC	1550	IN	Data Raw: ef bb bf 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 31 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 31 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 22 22 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 22 22 2c 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 49 73 72 63 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 76 65 73 74 6c 69 61 72 65 73 6f 72 74 5c 75 30 30 32 35 32 44 6d 79 5c 75 30 30 32 35 32 45 73 68 61 72 65 70 6f 69 6e 74 5c 75 30 30 32 35 32 45 63 6f 6d 5c 75 30 30 32 35 32 46 70 65 72 73 6f 6e 61 6c 5c 75 30 30 32 35 32 46 7a 69 67 61 5c 75 30 30 32 35 35 46 76 65 73 74 6c 69 61 5c 75 30 30 32 35 Data Ascii: {"Responses":[[1,{"OperationId":1,"StatusCode":0,"RawCellStorageErrorCode":"","ServerPageStatsTrace":"","FileId":"WOPIsrc=https\u00253A\u00252F\u00252Fvestliaresort\u00252Dmy\u00252Esharepoint\u00252Ecom\u00252Fpersonal\u00252Fziga\u00255Fvestlia\u0025
2024-10-04 14:44:56 UTC	8192	IN	Data Raw: 7a 4d 50 73 50 6b 52 47 79 77 76 39 65 51 42 54 73 54 6f 61 5a 5c 75 30 30 32 35 35 46 52 4a 61 46 6c 72 38 4d 72 79 52 77 55 31 74 6d 59 62 70 37 4e 50 35 5c 75 30 30 32 35 32 44 35 4a 63 74 6f 61 7a 56 41 33 78 71 4c 35 5a 31 6b 31 6f 55 38 34 6c 6b 6a 5c 75 30 30 32 35 35 46 36 68 5c 75 30 30 32 35 35 46 4f 6b 33 5c 75 30 30 32 35 32 44 5c 75 30 30 32 35 32 44 6e 4c 76 6d 65 54 73 38 74 43 4c 45 6e 74 47 61 35 72 6d 63 6c 4e 4a 6a 77 35 6b 73 30 69 50 76 5c 75 30 30 32 35 35 46 5c 75 30 30 32 35 32 44 53 4a 5c 75 30 30 32 35 35 46 35 37 54 68 6a 58 69 71 6b 4f 75 68 47 4b 42 55 77 71 63 55 53 47 32 6b 55 6d 59 48 52 6a 43 42 6f 55 47 36 75 63 33 5c 75 30 30 32 35 35 46 6f 4f 5c 75 30 30 32 35 32 44 31 51 38 37 71 4f 50 43 59 64 5c 75 30 30 32 35 32 44 Data Ascii: zMPsPkRGywv9eQBTsToaZ\u00255FRJaFlr8MryRwU1tmYbp7NP5\u00252D5JctoazVA3xqL5Z1k1oU84lkj\u00255F6h\u00255FOk3\u00252D\u00252DnLvmeTs8tCLEntGa5rmclNJjw5ks0iPv\u00255F\u00252DSJ\u00255F57ThjXiqkOuhGKBUwqcUSG2kUmYHRjCBoUG6uc3\u00255FoO\u00252D1Q87qOPCYd\u00252D
2024-10-04 14:44:56 UTC	5851	IN	Data Raw: 65 32 34 32 62 34 64 37 32 63 7c 31 33 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 33 33 35 35 35 31 38 36 36 2c 22 31 37 32 38 30 34 39 33 33 32 30 30 30 22 2c 34 30 32 36 36 30 34 35 33 2c 22 31 37 32 38 30 34 39 33 33 30 30 30 30 22 2c 34 36 39 37 36 39 32 36 34 2c 22 34 65 65 62 38 33 39 38 2d 65 30 31 33 2d 34 62 64 33 2d 38 37 66 37 2d 34 61 65 63 33 63 65 30 65 38 64 34 22 2c 36 30 33 39 39 33 31 35 34 2c 22 7b 34 62 34 39 62 32 35 30 2d 64 30 62 35 2d 30 66 38 31 2d 32 66 34 32 2d 34 33 34 65 39 38 39 30 65 32 63 34 7d 7b 31 34 7d 22 2c 37 33 38 32 30 35 30 32 37 2c 22 7b 36 39 65 31 37 32 36 31 2d 65 36 62 35 2d 34 64 36 66 2d 39 38 35 36 2d 39 34 65 32 34 32 62 34 64 37 32 63 7d 7b 31 34 7d 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 31 33 Data Ascii: e242b4d72c\|13","Properties":[335551866,"1728049332000",402660453,"1728049330000",469769264,"4eeb8398-e013-4bd3-87f7-4aec3ce0e8d4",603993154,"{4b49b250-d0b5-0f81-2f42-434e9890e2c4}{14}",738205027,"{69e17261-e6b5-4d6f-9856-94e242b4d72c}{14}"]},{"ClassId":13
2024-10-04 14:44:56 UTC	8192	IN	Data Raw: 32 44 6d 79 5c 75 30 30 32 35 32 45 73 68 61 72 65 70 6f 69 6e 74 5c 75 30 30 32 35 32 45 63 6f 6d 5c 75 30 30 32 35 32 46 70 65 72 73 6f 6e 61 6c 5c 75 30 30 32 35 32 46 7a 69 67 61 5c 75 30 30 32 35 35 46 76 65 73 74 6c 69 61 5c 75 30 30 32 35 35 46 6e 6f 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 35 46 76 74 69 5c 75 30 30 32 35 35 46 62 69 6e 5c 75 30 30 32 35 32 46 77 6f 70 69 5c 75 30 30 32 35 32 45 61 73 68 78 5c 75 30 30 32 35 32 46 66 69 6c 65 73 5c 75 30 30 32 35 32 46 30 39 38 62 65 36 36 65 37 34 37 36 34 34 65 34 62 34 30 32 62 37 32 38 36 65 34 31 35 38 39 63 5c 75 30 30 32 36 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 49 73 49 6e 67 31 64 43 49 Data Ascii: 2Dmy\u00252Esharepoint\u00252Ecom\u00252Fpersonal\u00252Fziga\u00255Fvestlia\u00255Fno\u00252F\u00255Fvti\u00255Fbin\u00252Fwopi\u00252Eashx\u00252Ffiles\u00252F098be66e747644e4b402b7286e41589c\u0026access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI
2024-10-04 14:44:56 UTC	8192	IN	Data Raw: 54 6a 5a 30 61 46 51 77 55 48 63 69 4c 43 4a 70 63 32 78 76 62 33 42 69 59 57 4e 72 49 6a 6f 69 56 48 4a 31 5a 53 49 73 49 6d 46 77 63 47 4e 30 65 43 49 36 49 6a 41 35 4f 47 4a 6c 4e 6a 5a 6c 4e 7a 51 33 4e 6a 51 30 5a 54 52 69 4e 44 41 79 59 6a 63 79 4f 44 5a 6c 4e 44 45 31 4f 44 6c 6a 4f 30 31 4e 53 57 39 6b 56 48 56 72 4d 6e 68 61 63 44 52 54 54 46 49 79 55 6c 51 33 63 55 39 48 63 54 4e 73 54 54 30 37 52 47 56 6d 59 58 56 73 64 44 73 77 5a 6d 55 33 4e 44 67 34 5a 6a 41 78 4d 32 4d 30 59 6a 67 34 4f 54 42 6b 4e 54 42 6d 4f 44 56 69 59 57 5a 6c 4d 6d 4d 30 59 54 73 37 56 48 4a 31 5a 54 73 37 4f 7a 45 34 4e 54 45 35 4e 7a 49 37 59 54 68 68 4d 6a 55 32 59 54 45 74 59 6a 41 32 59 79 31 68 4d 44 41 77 4c 54 41 77 4d 7a 6b 74 4e 44 4a 6b 5a 57 4d 34 59 6d 51 Data Ascii: TjZ0aFQwUHciLCJpc2xvb3BiYWNrIjoiVHJ1ZSIsImFwcGN0eCI6IjA5OGJlNjZlNzQ3NjQ0ZTRiNDAyYjcyODZlNDE1ODljO01NSW9kVHVrMnhacDRTTFIyUlQ3cU9HcTNsTT07RGVmYXVsdDswZmU3NDg4ZjAxM2M0Yjg4OTBkNTBmODViYWZlMmM0YTs7VHJ1ZTs7OzE4NTE5NzI7YThhMjU2YTEtYjA2Yy1hMDAwLTAwMzktNDJkZWM4YmQ
2024-10-04 14:44:56 UTC	8192	IN	Data Raw: 6f 70 65 72 74 69 65 73 22 3a 5b 32 30 31 33 34 30 31 32 32 2c 22 32 22 2c 32 36 38 34 34 32 36 33 35 2c 22 33 32 22 2c 33 33 35 35 35 31 35 30 30 2c 22 37 39 34 39 38 35 34 22 2c 33 33 35 35 35 37 36 37 38 2c 22 30 22 2c 33 33 35 35 35 37 36 37 39 2c 22 30 22 2c 34 36 39 37 36 39 32 32 36 2c 22 43 61 6c 69 62 72 69 22 2c 34 36 39 37 37 35 34 35 30 2c 22 68 31 22 2c 34 36 39 37 37 35 34 39 38 2c 22 70 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 31 31 37 39 37 32 35 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 36 39 65 31 37 32 36 31 2d 65 36 62 35 2d 34 64 36 66 2d 39 38 35 36 2d 39 34 65 32 34 32 62 34 64 37 32 63 7c 32 33 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 32 30 31 33 34 30 31 32 32 2c 22 32 22 2c 32 36 38 34 34 32 36 33 35 2c 22 32 38 22 2c 33 Data Ascii: operties":[201340122,"2",268442635,"32",335551500,"7949854",335557678,"0",335557679,"0",469769226,"Calibri",469775450,"h1",469775498,"p"]},{"ClassId":1179725,"ObjectId":"69e17261-e6b5-4d6f-9856-94e242b4d72c\|23","Properties":[201340122,"2",268442635,"28",3
2024-10-04 14:44:56 UTC	8192	IN	Data Raw: 38 38 34 32 36 38 2c 22 7b 36 39 65 31 37 32 36 31 2d 65 36 62 35 2d 34 64 36 66 2d 39 38 35 36 2d 39 34 65 32 34 32 62 34 64 37 32 63 7d 7b 32 31 7d 22 2c 36 30 33 39 38 37 34 37 35 2c 22 7b 36 39 65 31 37 32 36 31 2d 65 36 62 35 2d 34 64 36 66 2d 39 38 35 36 2d 39 34 65 32 34 32 62 34 64 37 32 63 7d 7b 33 34 7d 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 33 39 33 32 32 39 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 36 39 65 31 37 32 36 31 2d 65 36 62 35 2d 34 64 36 66 2d 39 38 35 36 2d 39 34 65 32 34 32 62 34 64 37 32 63 7c 37 37 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 32 30 31 33 33 33 37 36 33 2c 22 31 22 2c 33 33 35 35 35 31 37 35 33 2c 22 31 37 32 38 30 34 39 33 37 32 30 30 30 22 2c 33 33 35 35 35 31 38 36 36 2c 22 31 37 32 38 30 34 39 33 37 32 Data Ascii: 884268,"{69e17261-e6b5-4d6f-9856-94e242b4d72c}{21}",603987475,"{69e17261-e6b5-4d6f-9856-94e242b4d72c}{34}"]},{"ClassId":393229,"ObjectId":"69e17261-e6b5-4d6f-9856-94e242b4d72c\|77","Properties":[201333763,"1",335551753,"1728049372000",335551866,"1728049372
2024-10-04 14:44:56 UTC	8192	IN	Data Raw: 36 39 32 35 30 2c 22 56 65 64 6c 61 67 74 65 c2 a0 22 2c 34 36 39 37 36 39 37 34 36 2c 22 38 22 2c 34 36 39 37 36 39 38 31 39 2c 22 31 31 22 2c 35 33 36 38 38 34 32 36 38 2c 22 7b 36 39 65 31 37 32 36 31 2d 65 36 62 35 2d 34 64 36 66 2d 39 38 35 36 2d 39 34 65 32 34 32 62 34 64 37 32 63 7d 7b 32 31 7d 22 2c 36 30 33 39 38 37 34 37 35 2c 22 7b 36 39 65 31 37 32 36 31 2d 65 36 62 35 2d 34 64 36 66 2d 39 38 35 36 2d 39 34 65 32 34 32 62 34 64 37 32 63 7d 7b 39 38 7d 2c 7b 36 39 65 31 37 32 36 31 2d 65 36 62 35 2d 34 64 36 66 2d 39 38 35 36 2d 39 34 65 32 34 32 62 34 64 37 32 63 7d 7b 33 34 7d 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 31 31 37 39 37 32 35 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 36 39 65 31 37 32 36 31 2d 65 36 62 35 2d 34 64 36 66 2d 39 38 Data Ascii: 69250,"Vedlagte",469769746,"8",469769819,"11",536884268,"{69e17261-e6b5-4d6f-9856-94e242b4d72c}{21}",603987475,"{69e17261-e6b5-4d6f-9856-94e242b4d72c}{98},{69e17261-e6b5-4d6f-9856-94e242b4d72c}{34}"]},{"ClassId":1179725,"ObjectId":"69e17261-e6b5-4d6f-98
2024-10-04 14:44:56 UTC	8192	IN	Data Raw: 57 70 36 51 55 5a 47 52 57 63 69 4c 43 4a 70 63 32 78 76 62 33 42 69 59 57 4e 72 49 6a 6f 69 56 48 4a 31 5a 53 49 73 49 6d 46 77 63 47 4e 30 65 43 49 36 49 6a 41 35 4f 47 4a 6c 4e 6a 5a 6c 4e 7a 51 33 4e 6a 51 30 5a 54 52 69 4e 44 41 79 59 6a 63 79 4f 44 5a 6c 4e 44 45 31 4f 44 6c 6a 4f 30 31 4e 53 57 39 6b 56 48 56 72 4d 6e 68 61 63 44 52 54 54 46 49 79 55 6c 51 33 63 55 39 48 63 54 4e 73 54 54 30 37 52 47 56 6d 59 58 56 73 64 44 73 31 4d 57 55 35 4e 32 56 6b 59 54 46 68 4d 6d 45 30 4e 7a 42 6d 4f 54 6c 69 4d 54 4e 69 59 7a 55 31 4d 44 59 77 4d 47 4d 32 4f 44 73 37 56 48 4a 31 5a 54 73 37 4f 7a 45 34 4e 54 45 35 4e 7a 49 37 59 32 59 35 5a 6a 55 32 59 54 45 74 5a 54 41 7a 4d 53 31 68 4d 44 41 77 4c 54 41 79 59 7a 67 74 5a 54 4a 68 4d 47 55 34 59 6d 5a 69 Data Ascii: Wp6QUZGRWciLCJpc2xvb3BiYWNrIjoiVHJ1ZSIsImFwcGN0eCI6IjA5OGJlNjZlNzQ3NjQ0ZTRiNDAyYjcyODZlNDE1ODljO01NSW9kVHVrMnhacDRTTFIyUlQ3cU9HcTNsTT07RGVmYXVsdDs1MWU5N2VkYTFhMmE0NzBmOTliMTNiYzU1MDYwMGM2ODs7VHJ1ZTs7OzE4NTE5NzI7Y2Y5ZjU2YTEtZTAzMS1hMDAwLTAyYzgtZTJhMGU4YmZi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49754	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:56 UTC	452	OUT	GET /o/RemoteUls.ashx?build=16.0.18006.41011&waccluster=GEU8&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:44:56 UTC	4473	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 59f9284e-7716-4040-9dc2-45b295d0a941 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: AM4PEPF0000F2C8 X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU8 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 03ED953A90AE1A5E8FFD1D650B1E74C0E54D7AFE X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5b&DC=GEU8&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: AM4PEPF0000F2C8 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: F99F064447EF475BB1D86FC080E023AB Ref B: EWR311000104011 Ref C: 2024-10-04T14:44:56Z Date: Fri, 04 Oct 2024 14:44:55 GMT Connection: close
2024-10-04 14:44:56 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:56 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 757ce4f4-401e-000a-128c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144456Z-15767c5fc55qkvj6n60pxm9mbw00000001v000000000catd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:56 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:56 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 24b39cfc-301e-0096-2a8c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144456Z-15767c5fc55qkvj6n60pxm9mbw00000001x0000000003z0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:56 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:56 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 3a0dc1eb-601e-0032-608c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144456Z-15767c5fc55gs96cphvgp5f5vc0000000cq00000000005ck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:56 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:56 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:56 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b2393cc3-501e-005b-768c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144456Z-15767c5fc55gq5fmm10nm5qqr80000000crg00000000kba9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:56 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:56 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:56 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: aa8826a4-b01e-0053-608c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144456Z-15767c5fc55gq5fmm10nm5qqr80000000cpg00000000rh9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:56 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49775	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:56 UTC	3003	OUT	POST /o/RemoteUls.ashx?build=16.0.18006.41011&waccluster=GEU8&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":2,"MsSinceStart":2882,"Value":"https://c1-onenote-15.cdn.office.net:443/o/s/hAC723362D3106BBB_App_Scripts/wp5/onenoteSyncNew.min.js","Type":"ResourceDownloadWarning"},{"Index":3,"MsSinceStart":3334,"Value":"https://c1-onenote-15.cdn.office.net:443/o/s/h003981BBEE6D2307_App_Scripts/MicrosoftAjaxDS.js","Type":"ResourceDownloadWarning"},{"Index":4,"MsSinceStart":3334,"Value":"https://c1-onenote-15.cdn.office.net:443/o/s/h9FED9C07A4476CD2_App_Scripts/1033/common-intl.min.js","Type":"ResourceDownloadWarning"},{"Index":5,"MsSinceStart":3612,"Value":"https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=nb-NO&wopisrc=https%3A%2F%2Fvestliaresort-my.sharepoint.com%2Fpersonal%2Fziga_vestlia_no%2F_vti_bin%2Fwopi.ashx%2Ffolders%2Fd1efb94cab344e6984f394b21386b077&wdenableroaming=1&mscc=1&wdodb=1&hid=A6A256A1-20A3-A000-26C1-E4F692F076A8.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fvestliaresort-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdor [TRUNCATED] sec-ch-ua-platform: "Windows" Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=nb-NO&wopisrc=https%3A%2F%2Fvestliaresort-my.sharepoint.com%2Fpersonal%2Fziga_vestlia_no%2F_vti_bin%2Fwopi.ashx%2Ffolders%2Fd1efb94cab344e6984f394b21386b077&wdenableroaming=1&mscc=1&wdodb=1&hid=A6A256A1-20A3-A000-26C1-E4F692F076A8.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fvestliaresort-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1728053085782&jsapi=1&jsapiver=v1&newsession=1&corrid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-04 14:44:56 UTC	1582	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 3b4f4346-ce85-4c5e-86d4-ac5143628bb8 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: AM4PEPF0000B710 X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU8 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5c&DC=GEU8&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: AM4PEPF0000B710 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: F75F9A1189F34D37957B2FD87726D20C Ref B: EWR311000106045 Ref C: 2024-10-04T14:44:56Z Date: Fri, 04 Oct 2024 14:44:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:57 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 1cc301c6-e01e-0071-6b8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144457Z-15767c5fc55lghvzbxktxfqntw0000000cd0000000009ry6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:57 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: e0871f45-901e-00a0-0d8c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144457Z-15767c5fc55ncqdn59ub6rndq00000000ccg000000007x44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:57 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:57 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 023e3708-a01e-003d-568c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144457Z-15767c5fc554wklc0x4mc5pq0w0000000cxg00000000qyae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:57 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:57 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:57 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1cc301ca-e01e-0071-6f8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144457Z-15767c5fc55rv8zjq9dg0musxg0000000cn000000000k8ze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:57 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:57 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 023e3944-a01e-003d-708c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144457Z-15767c5fc55ncqdn59ub6rndq00000000cdg0000000041m2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:57 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49787	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:57 UTC	369	OUT	GET /o/OneNote.ashx HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:44:57 UTC	1059	IN	HTTP/1.1 503 Service Unavailable Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 7c49c23b-dc55-4356-9872-cf9b310dc433 X-UserSessionId: 7c49c23b-dc55-4356-9872-cf9b310dc433 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: AM4PEPF0000B702 X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU8 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: AM4PEPF0000B702 X-WacFrontEnd: AM4PEPF0000B702 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 1FF4EE02973C49498E1FD0D1EEE3CA73 Ref B: EWR311000105037 Ref C: 2024-10-04T14:44:57Z Date: Fri, 04 Oct 2024 14:44:56 GMT Connection: close
2024-10-04 14:44:57 UTC	33	IN	Data Raw: 31 62 0d 0a 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 0d 0a Data Ascii: 1bThe service is unavailable.
2024-10-04 14:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49789	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:57 UTC	452	OUT	GET /o/RemoteUls.ashx?build=16.0.18006.41011&waccluster=GEU8&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:44:57 UTC	4473	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 7b24f9f4-376d-403d-b203-b3fe27bc3d24 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: AM4PEPF0000B70C X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU8 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 03ED953A90AE1A5E8FFD1D650B1E74C0E54D7AFE X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5a&DC=GEU8&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: AM4PEPF0000B70C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: D0B0D173E7D34CC99E28BBC1B66BB816 Ref B: EWR311000102051 Ref C: 2024-10-04T14:44:57Z Date: Fri, 04 Oct 2024 14:44:57 GMT Connection: close
2024-10-04 14:44:57 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:57 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:57 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 24b39fc0-301e-0096-298c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144457Z-15767c5fc55tsfp92w7yna557w0000000cp000000000g5xf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:57 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:57 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: c54fb296-901e-008f-528c-1567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144457Z-15767c5fc55whfstvfw43u8fp40000000cug000000009tn1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:57 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:58 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: a68dfe67-f01e-0052-588c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144458Z-15767c5fc55rg5b7sh1vuv8t7n0000000d0000000000ewub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:58 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:57 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:58 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: dc68ccfc-201e-006e-438c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144458Z-15767c5fc554w2fgapsyvy8ua00000000c5000000000g0eq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:58 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:58 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:58 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 79ade187-001e-0065-788c-150b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144458Z-15767c5fc55rv8zjq9dg0musxg0000000ct000000000154g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:58 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49797	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:58 UTC	2781	OUT	POST /o/RemoteUls.ashx?build=16.0.18006.41011&waccluster=GEU8&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":5,"MsSinceStart":4232,"Value":"Get cells response received:200","Type":"BootLogs"},{"Index":6,"MsSinceStart":4233,"Value":"Launching FastView from entry point WacBootGetCells","Type":"BootLogs"},{"Index":7,"MsSinceStart":4235,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"},{"Index":8,"MsSinceStart":5022,"Value":"https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=nb-NO&wopisrc=https%3A%2F%2Fvestliaresort-my.sharepoint.com%2Fpersonal%2Fziga_vestlia_no%2F_vti_bin%2Fwopi.ashx%2Ffolders%2Fd1efb94cab344e6984f394b21386b077&wdenableroaming=1&mscc=1&wdodb=1&hid=A6A256A1-20A3-A000-26C1-E4F692F076A8.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fvestliaresort-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1728053085782&jsapi=1&jsapiver=v1&newsession=1&corrid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1& [TRUNCATED] sec-ch-ua-platform: "Windows" Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=nb-NO&wopisrc=https%3A%2F%2Fvestliaresort-my.sharepoint.com%2Fpersonal%2Fziga_vestlia_no%2F_vti_bin%2Fwopi.ashx%2Ffolders%2Fd1efb94cab344e6984f394b21386b077&wdenableroaming=1&mscc=1&wdodb=1&hid=A6A256A1-20A3-A000-26C1-E4F692F076A8.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fvestliaresort-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1728053085782&jsapi=1&jsapiver=v1&newsession=1&corrid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-04 14:44:58 UTC	1588	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: de62bea4-e432-4ac6-8249-8e2acacc6764 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: AM4PEPF0000B70C X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU8 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5a&DC=GEU8&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: AM4PEPF0000B70C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 4B925701D4964C8BB70799B1EF2E1F2E Ref B: EWR311000102049 Ref C: 2024-10-04T14:44:58Z Date: Fri, 04 Oct 2024 14:44:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:58 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0da94923-701e-0097-168c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144458Z-15767c5fc55qdcd62bsn50hd6s0000000cbg00000000s9pe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:58 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:58 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8e9c869d-201e-000c-4b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144458Z-15767c5fc55qdcd62bsn50hd6s0000000cd000000000mb7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:58 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:58 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 09e6f7ee-001e-0034-548c-15dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144458Z-15767c5fc55v7j95gq2uzq37a00000000cwg00000000e55a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:58 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:58 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f10c824-e01e-0085-1c8c-15c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144458Z-15767c5fc55472x4k7dmphmadg0000000cag00000000fc4x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:58 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:58 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:58 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 82f8b22c-c01e-0014-5a8c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144458Z-15767c5fc55qkvj6n60pxm9mbw00000001u000000000gkc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:58 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:59 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:59 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 30fd46b0-d01e-00a1-368c-1535b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144459Z-15767c5fc55qkvj6n60pxm9mbw00000001w0000000007yp2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:59 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:59 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:59 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 75493038-e01e-00aa-508c-15ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144459Z-15767c5fc552g4w83buhsr3htc0000000cpg00000000fa91 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:59 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:59 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c2ca9d4d-801e-0035-458c-15752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144459Z-15767c5fc55lghvzbxktxfqntw0000000c9g00000000pngv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:59 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:59 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 831ef799-b01e-0098-7b8c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144459Z-15767c5fc55472x4k7dmphmadg0000000cdg00000000488e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:59 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:44:59 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:44:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:44:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6a901ce3-301e-005d-708c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144459Z-15767c5fc5546rn6ch9zv310e000000005pg000000009uqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:44:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:00 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:00 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a7623418-001e-00a2-348c-15d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144500Z-15767c5fc55n4msds84xh4z67w00000006bg00000000e5uk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:00 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:00 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 4b0a3852-c01e-00ad-3b8c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144500Z-15767c5fc55jdxmppy6cmd24bn00000004tg00000000sdtr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:00 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: eccf174e-001e-0079-238c-1512e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144500Z-15767c5fc55dtdv4d4saq7t47n0000000ccg00000000nw67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:00 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 76615707-c01e-0082-6a8c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144500Z-15767c5fc55rv8zjq9dg0musxg0000000cm000000000nxgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:00 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:00 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:00 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: bb2e28bd-501e-0016-0b8c-15181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144500Z-15767c5fc55rg5b7sh1vuv8t7n0000000cyg00000000mnxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:00 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:01 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:01 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4da5bf60-a01e-0070-668c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144501Z-15767c5fc55rg5b7sh1vuv8t7n0000000cyg00000000mnyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:01 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:01 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:01 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 8789ddbb-a01e-0084-6a8c-159ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144501Z-15767c5fc55fdfx81a30vtr1fw0000000cwg00000000uh4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:01 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:01 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:01 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 0dcb6c6d-e01e-0003-668c-150fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144501Z-15767c5fc55ncqdn59ub6rndq00000000c7g00000000rkzf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:01 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:01 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:01 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 9bed673a-001e-0046-278c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144501Z-15767c5fc554w2fgapsyvy8ua00000000c7g000000006mm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:01 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:01 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:01 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 772ea1ab-e01e-003c-188c-15c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144501Z-15767c5fc55n4msds84xh4z67w00000006dg000000007my9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:01 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:01 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:01 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3a0dcc46-601e-0032-6c8c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144501Z-15767c5fc55tsfp92w7yna557w0000000cm000000000qfdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:01 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:01 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:01 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 15fe0b87-a01e-0002-3b8c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144501Z-15767c5fc55jdxmppy6cmd24bn00000004w000000000gm9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:02 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:01 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:02 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: c54fbac1-901e-008f-588c-1567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144502Z-15767c5fc55gq5fmm10nm5qqr80000000crg00000000kbs8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:02 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:01 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:02 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 75858473-001e-000b-318c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144502Z-15767c5fc55n4msds84xh4z67w00000006d00000000089zv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:02 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:01 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:01 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 1f480944-c01e-002b-018c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144501Z-15767c5fc55whfstvfw43u8fp40000000cs000000000mvd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:02 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:04 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:04 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b83a8dc4-f01e-003f-308c-15d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144504Z-15767c5fc55v7j95gq2uzq37a00000000cu000000000px18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:04 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:04 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2f8443ca-b01e-0070-308c-151cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144504Z-15767c5fc55whfstvfw43u8fp40000000crg00000000nxz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:04 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:04 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 76252b1b-c01e-0066-488c-15a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144504Z-15767c5fc55ncqdn59ub6rndq00000000cd0000000006ndt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:04 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:04 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9a197f6-401e-0078-3b8c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144504Z-15767c5fc55xsgnlxyxy40f4m00000000ck000000000f6w6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:04 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:04 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:04 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7be6812e-d01e-008e-528c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144504Z-15767c5fc55lghvzbxktxfqntw0000000ccg00000000bm89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:04 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:05 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 1f480aea-c01e-002b-028c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144505Z-15767c5fc55jdxmppy6cmd24bn000000050g0000000002a7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:05 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:05 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7be6821c-d01e-008e-398c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144505Z-15767c5fc55n4msds84xh4z67w00000006dg000000007n6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:05 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 75d9c1a5-001e-0082-2fde-155880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144505Z-15767c5fc55jdxmppy6cmd24bn00000004ug00000000peys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:05 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: cce0beff-001e-0082-398c-155880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144505Z-15767c5fc55rg5b7sh1vuv8t7n0000000cz000000000kahg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:05 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: aa883537-b01e-0053-4c8c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144505Z-15767c5fc55v7j95gq2uzq37a00000000cwg00000000e5f7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:06 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:06 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: dc68dac5-201e-006e-298c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144506Z-15767c5fc55472x4k7dmphmadg0000000ce0000000002ppt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:06 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:06 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:06 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4da5c699-a01e-0070-198c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144506Z-15767c5fc5546rn6ch9zv310e000000005pg000000009v04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:06 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:06 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:06 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: be018b72-401e-0035-7e8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144506Z-15767c5fc55472x4k7dmphmadg0000000c7g00000000rv3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:06 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:06 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: be018b82-401e-0035-0c8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144506Z-15767c5fc55tsfp92w7yna557w0000000cqg00000000b4a5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:06 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:06 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 801e2bd2-b01e-0021-6a8c-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144506Z-15767c5fc55rg5b7sh1vuv8t7n0000000d10000000009uss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:06 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:07 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 1cc309a5-e01e-0071-358c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144507Z-15767c5fc55gq5fmm10nm5qqr80000000cq000000000q12c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:07 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 04c46130-501e-0064-028c-151f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144507Z-15767c5fc55gs96cphvgp5f5vc0000000ceg00000000v39u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:07 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:07 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 285c7e33-c01e-008e-718c-157381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144507Z-15767c5fc554w2fgapsyvy8ua00000000c5g00000000eqtu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:07 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:07 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:07 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 6a902a44-301e-005d-788c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144507Z-15767c5fc554wklc0x4mc5pq0w0000000d300000000029vz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:07 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:07 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:07 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 5c8a78a2-401e-0047-6604-168597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144507Z-15767c5fc55dtdv4d4saq7t47n0000000cc000000000nkxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:07 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:08 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 4da5c882-a01e-0070-628c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144508Z-15767c5fc554wklc0x4mc5pq0w0000000cyg00000000mc12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:08 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:08 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 15fe1592-a01e-0002-378c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144508Z-15767c5fc55tsfp92w7yna557w0000000ct00000000014fy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:08 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:08 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:08 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: b9a19b13-401e-0078-148c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144508Z-15767c5fc55rv8zjq9dg0musxg0000000chg00000000u6b6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:08 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:08 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 9bed6e8e-001e-0046-5b8c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144508Z-15767c5fc554wklc0x4mc5pq0w0000000d0000000000dv4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:09 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e08726cd-901e-00a0-738c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144509Z-15767c5fc554w2fgapsyvy8ua00000000c5g00000000eqzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:09 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 766164d5-c01e-0082-668c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144509Z-15767c5fc55tsfp92w7yna557w0000000cmg00000000q7n9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:11 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dcc4dd0d-f01e-0099-7c8c-159171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144511Z-15767c5fc55n4msds84xh4z67w00000006ag00000000htq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:11 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 4a2177bf-401e-00a3-638c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144511Z-15767c5fc55qdcd62bsn50hd6s0000000ch0000000004p7u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:11 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:11 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d59d44fd-601e-003e-698c-153248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144511Z-15767c5fc55sdcjq8ksxt4n9mc000000021g000000006p7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:11 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:11 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:11 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4da5cae8-a01e-0070-0e8c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144511Z-15767c5fc554l9xf959gp9cb1s00000006xg000000003f65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:11 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:11 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:11 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 1cc30b66-e01e-0071-368c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144511Z-15767c5fc554wklc0x4mc5pq0w0000000d1000000000a0kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:11 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:11 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:11 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 8e9c9a52-201e-000c-6b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144511Z-15767c5fc55n4msds84xh4z67w00000006dg000000007nk0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:11 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:11 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:11 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: b9a19cb7-401e-0078-068c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144511Z-15767c5fc55d6fcl6x6bw8cpdc0000000cpg000000000xpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:11 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:11 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:11 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0da9586c-701e-0097-318c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144511Z-15767c5fc55qdcd62bsn50hd6s0000000cag00000000vdz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:11 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:11 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:12 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 1cc30bd5-e01e-0071-1a8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144512Z-15767c5fc55ncqdn59ub6rndq00000000cb000000000e6c5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:12 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:11 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:12 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 82f8c3b9-c01e-0014-418c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144512Z-15767c5fc55qdcd62bsn50hd6s0000000ccg00000000nzg1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:12 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:12 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: b9a19e00-401e-0078-388c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144512Z-15767c5fc55xsgnlxyxy40f4m00000000ck000000000f7cw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:12 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:12 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: b23951fc-501e-005b-2a8c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144512Z-15767c5fc55whfstvfw43u8fp40000000cv0000000007gfe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:12 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:12 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:12 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 7afec079-601e-000d-468c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144512Z-15767c5fc55qdcd62bsn50hd6s0000000ceg00000000ef7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:12 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:12 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3ef81e2a-f01e-001f-3f8c-155dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144512Z-15767c5fc55w69c2zvnrz0gmgw0000000cyg000000006v14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:12 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 94d92349-401e-0015-3218-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144512Z-15767c5fc552g4w83buhsr3htc0000000csg00000000358p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:13 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:13 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 1392789d-401e-0047-0e8c-158597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144513Z-15767c5fc55472x4k7dmphmadg0000000cdg0000000048v3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:13 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:13 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:13 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 6a90313a-301e-005d-1a8c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144513Z-15767c5fc55fdfx81a30vtr1fw0000000d30000000002347 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:13 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:13 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:13 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: a76247f8-001e-00a2-558c-15d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144513Z-15767c5fc55rv8zjq9dg0musxg0000000cmg00000000p4ps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:13 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:13 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:13 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7afec1f8-601e-000d-328c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144513Z-15767c5fc55ncqdn59ub6rndq00000000ccg000000007ysk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:13 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:13 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:13 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 92784c80-801e-002a-088c-1531dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144513Z-15767c5fc554wklc0x4mc5pq0w0000000cxg00000000qz4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:13 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:14 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:14 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4a217eb8-401e-00a3-218c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144514Z-15767c5fc55rv8zjq9dg0musxg0000000cng00000000hdfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:14 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:14 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:14 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: c825d9ef-901e-007b-278c-15ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144514Z-15767c5fc554l9xf959gp9cb1s00000006yg0000000004af x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:14 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:14 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6a90350a-301e-005d-348c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144515Z-15767c5fc55qkvj6n60pxm9mbw00000001t000000000m2r5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:15 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:15 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:15 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: ed356ac5-101e-0046-2b8c-1591b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144515Z-15767c5fc55dtdv4d4saq7t47n0000000cg0000000008d3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:15 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:15 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 29534450-901e-0064-768c-15e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144515Z-15767c5fc554w2fgapsyvy8ua00000000c3000000000pffc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49885	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:15 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 6ec2e3f4-801e-007b-208c-15e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144515Z-15767c5fc55qdcd62bsn50hd6s0000000cg0000000008zud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:15 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 76616de5-c01e-0082-6f8c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144515Z-15767c5fc55rg5b7sh1vuv8t7n0000000cz000000000kaz4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49886	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:16 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 0da95f5c-701e-0097-318c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144516Z-15767c5fc55qkvj6n60pxm9mbw00000001xg0000000027sx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49891	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:17 UTC	877	OUT	POST /o/RemoteUls.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&officeserverversion= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 898 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://vestliaresort-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://vestliaresort-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-04 14:45:17 UTC	898	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 38 30 35 33 30 38 39 36 31 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 37 31 34 37 31 35 2c 22 54 22 3a 31 35 39 38 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 49 64 3a 20 57 61 63 5f 41 70 70 42 6f 6f 74 53 74 61 74 65 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 75 6e 64 65 66 69 6e 65 64 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 32 38 38 2c 22 54 22 3a 31 35 39 38 2c 22 4d 22 3a 22 50 72 6f 63 65 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 57 61 63 5f 41 70 70 42 6f 6f 74 53 74 61 74 65 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 35 37 31 34 32 37 31 2c 22 54 22 3a 31 35 39 38 2c 22 4d 22 3a 22 57 41 43 20 42 6f 6f 74 20 41 70 70 Data Ascii: {"T":1728053089617,"L":[{"G":595714715,"T":1598,"M":"Received messageId: Wac_AppBootState, correlation: undefined","C":379,"D":50},{"G":596464288,"T":1598,"M":"Processing message: Wac_AppBootState","C":379,"D":50},{"G":595714271,"T":1598,"M":"WAC Boot App
2024-10-04 14:45:17 UTC	4634	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 6ffe329c-c829-417f-9ba0-84153028ba60 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011832 X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://vestliaresort-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 03ED953A90AE1A5E8FFD1D650B1E74C0E54D7AFE X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF00011832 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_powerpointslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 5D1383A1DF69487AB7429FF351499135 Ref B: EWR311000101019 Ref C: 2024-10-04T14:45:17Z Date: Fri, 04 Oct 2024 14:45:17 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:17 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:17 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 704395e8-201e-005d-718c-15afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144517Z-15767c5fc55xsgnlxyxy40f4m00000000cp0000000003mge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:17 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:17 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:17 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 8be9c1e7-301e-0052-678c-1565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144517Z-15767c5fc55qdcd62bsn50hd6s0000000cbg00000000saqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:17 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:17 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:17 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 21dfe39b-001e-0049-468c-155bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144517Z-15767c5fc552g4w83buhsr3htc0000000cr000000000907z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:17 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:17 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:17 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: dc68e902-201e-006e-0d8c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144517Z-15767c5fc55dtdv4d4saq7t47n0000000cd000000000n5d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:17 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49892	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:17 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:17 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 82f8cc24-c01e-0014-3a8c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144517Z-15767c5fc55qkvj6n60pxm9mbw00000001y0000000000ezg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:17 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49893	66.29.147.206	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:18 UTC	647	OUT	GET /app/login/ HTTP/1.1 Host: qafshah.com.sa Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:45:19 UTC	367	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:18 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=d049a4d20fb27353a026a72ab79b453c; path=/ Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-04 14:45:19 UTC	7825	IN	Data Raw: 32 30 30 30 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 53 43 52 49 50 54 3e 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 75 6e 65 73 63 61 70 65 28 22 25 33 43 25 32 31 44 4f 43 54 59 50 45 25 32 30 68 74 6d 6c 25 33 45 25 32 30 25 33 43 68 74 6d 6c 25 32 30 64 69 72 25 33 44 6c 74 72 25 32 30 63 6c 61 73 73 25 32 30 6c 61 6e 67 25 33 44 65 6e 25 33 45 25 30 41 25 33 43 6d 65 74 61 25 32 30 63 68 61 72 73 65 74 25 33 44 75 74 66 2d 38 25 33 45 25 30 41 25 33 43 74 69 74 6c 65 25 33 45 53 69 67 6e 25 32 30 69 6e 25 32 30 74 6f 25 32 30 79 6f 75 72 25 32 30 61 63 63 6f 75 6e 74 25 33 43 2f 74 69 74 6c 65 25 33 45 25 30 41 25 33 43 6d 65 74 61 25 32 30 68 74 74 70 2d 65 71 75 69 76 25 33 44 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 25 32 30 63 Data Ascii: 2000<HTML><HEAD><SCRIPT>document.write(unescape("%3C%21DOCTYPE%20html%3E%20%3Chtml%20dir%3Dltr%20class%20lang%3Den%3E%0A%3Cmeta%20charset%3Dutf-8%3E%0A%3Ctitle%3ESign%20in%20to%20your%20account%3C/title%3E%0A%3Cmeta%20http-equiv%3DX-UA-Compatible%20c
2024-10-04 14:45:19 UTC	373	IN	Data Raw: 44 40 6d 65 64 69 61 25 32 30 25 32 38 6d 69 6e 2d 77 69 64 74 68 25 33 41 37 36 38 70 78 25 32 39 25 32 30 61 6e 64 25 32 30 25 32 38 6d 61 78 2d 77 69 64 74 68 25 33 41 39 39 31 70 78 25 32 39 25 37 42 25 37 44 40 6d 65 64 69 61 25 32 30 25 32 38 6d 69 6e 2d 77 69 64 74 68 25 33 41 37 36 38 70 78 25 32 39 25 32 30 61 6e 64 25 32 30 25 32 38 6d 61 78 2d 77 69 64 74 68 25 33 41 39 39 31 70 78 25 32 39 25 37 42 25 37 44 40 6d 65 64 69 61 25 32 30 25 32 38 6d 69 6e 2d 77 69 64 74 68 25 33 41 37 36 38 70 78 25 32 39 25 32 30 61 6e 64 25 32 30 25 32 38 6d 61 78 2d 77 69 64 74 68 25 33 41 39 39 31 70 78 25 32 39 25 37 42 25 37 44 40 6d 65 64 69 61 25 32 30 25 32 38 6d 69 6e 2d 77 69 64 74 68 25 33 41 37 36 38 70 78 25 32 39 25 32 30 61 6e 64 25 32 30 25 32 38 Data Ascii: D@media%20%28min-width%3A768px%29%20and%20%28max-width%3A991px%29%7B%7D@media%20%28min-width%3A768px%29%20and%20%28max-width%3A991px%29%7B%7D@media%20%28min-width%3A768px%29%20and%20%28max-width%3A991px%29%7B%7D@media%20%28min-width%3A768px%29%20and%20%28
2024-10-04 14:45:19 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-04 14:45:19 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 77 69 64 74 68 25 33 41 39 39 32 70 78 25 32 39 25 37 42 25 37 44 40 6d 65 64 69 61 25 32 30 25 32 38 6d 69 6e 2d 77 69 64 74 68 25 33 41 39 39 32 70 78 25 32 39 25 37 42 25 37 44 40 6d 65 64 69 61 25 32 30 25 32 38 6d 61 78 2d 77 69 64 74 68 25 33 41 35 33 39 70 78 25 32 39 25 37 42 25 37 44 40 6d 65 64 69 61 25 32 30 25 32 38 6d 69 6e 2d 77 69 64 74 68 25 33 41 35 34 30 70 78 25 32 39 25 32 30 61 6e 64 25 32 30 25 32 38 6d 61 78 2d 77 69 64 74 68 25 33 41 37 36 37 70 78 25 32 39 25 37 42 25 37 44 40 6d 65 64 69 61 25 32 30 25 32 38 6d 69 6e 2d 77 69 64 74 68 25 33 41 37 36 38 70 78 25 32 39 25 32 30 61 6e 64 25 32 30 25 32 38 6d 61 78 2d 77 69 64 74 68 25 33 41 39 39 31 70 78 25 32 39 25 37 42 25 37 44 40 6d 65 64 69 61 25 32 30 25 32 Data Ascii: 2000width%3A992px%29%7B%7D@media%20%28min-width%3A992px%29%7B%7D@media%20%28max-width%3A539px%29%7B%7D@media%20%28min-width%3A540px%29%20and%20%28max-width%3A767px%29%7B%7D@media%20%28min-width%3A768px%29%20and%20%28max-width%3A991px%29%7B%7D@media%20%2
2024-10-04 14:45:19 UTC	6	IN	Data Raw: 74 25 32 32 25 35 Data Ascii: t%22%5
2024-10-04 14:45:19 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-04 14:45:19 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 44 25 33 41 68 6f 76 65 72 25 32 43 69 6e 70 75 74 25 35 42 74 79 70 65 25 33 44 25 32 32 72 65 73 65 74 25 32 32 25 35 44 25 33 41 68 6f 76 65 72 25 37 42 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 25 33 41 25 32 33 62 32 62 32 62 32 25 33 42 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 25 33 41 72 67 62 61 25 32 38 30 25 32 43 30 25 32 43 30 25 32 43 30 2e 33 25 32 39 25 37 44 2e 62 74 6e 2d 66 6f 63 75 73 25 32 43 2e 62 74 6e 25 33 41 66 6f 63 75 73 25 32 43 62 75 74 74 6f 6e 25 33 41 66 6f 63 75 73 25 32 43 69 6e 70 75 74 25 35 42 74 79 70 65 25 33 44 25 32 32 62 75 74 74 6f 6e 25 32 32 25 35 44 25 33 41 66 6f 63 75 73 25 32 43 69 6e 70 75 74 25 35 42 74 79 70 65 25 33 44 25 32 32 73 75 62 6d 69 74 25 32 32 25 35 44 25 33 41 Data Ascii: 2000D%3Ahover%2Cinput%5Btype%3D%22reset%22%5D%3Ahover%7Bbackground-color%3A%23b2b2b2%3Bbackground-color%3Argba%280%2C0%2C0%2C0.3%29%7D.btn-focus%2C.btn%3Afocus%2Cbutton%3Afocus%2Cinput%5Btype%3D%22button%22%5D%3Afocus%2Cinput%5Btype%3D%22submit%22%5D%3A
2024-10-04 14:45:19 UTC	6	IN	Data Raw: 43 69 6e 70 75 74 Data Ascii: Cinput
2024-10-04 14:45:19 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-04 14:45:19 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 25 35 42 74 79 70 65 25 33 44 25 32 32 72 65 73 65 74 25 32 32 25 35 44 25 33 41 66 6f 63 75 73 25 32 43 2e 62 74 6e 2e 62 74 6e 2d 67 6f 6f 67 6c 65 25 33 41 66 6f 63 75 73 25 37 42 6f 75 74 6c 69 6e 65 25 33 41 31 70 78 25 32 30 73 6f 6c 69 64 25 32 30 77 69 6e 64 6f 77 54 65 78 74 25 33 42 62 6f 72 64 65 72 25 33 41 31 70 78 25 32 30 73 6f 6c 69 64 25 32 30 77 69 6e 64 6f 77 54 65 78 74 25 33 42 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 25 33 41 77 69 6e 64 6f 77 25 33 42 63 6f 6c 6f 72 25 33 41 77 69 6e 64 6f 77 54 65 78 74 25 33 42 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 25 33 41 75 6e 64 65 72 6c 69 6e 65 25 37 44 69 6e 70 75 74 25 35 42 74 79 70 65 25 33 44 25 32 32 73 75 62 6d 69 74 25 32 32 25 35 44 2e 70 72 69 6d 61 Data Ascii: 2000%5Btype%3D%22reset%22%5D%3Afocus%2C.btn.btn-google%3Afocus%7Boutline%3A1px%20solid%20windowText%3Bborder%3A1px%20solid%20windowText%3Bbackground-color%3Awindow%3Bcolor%3AwindowText%3Btext-decoration%3Aunderline%7Dinput%5Btype%3D%22submit%22%5D.prima

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49897	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:18 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:18 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 023e591f-a01e-003d-618c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144518Z-15767c5fc55dtdv4d4saq7t47n0000000cfg000000009yk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:18 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49895	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:18 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:18 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ba3c7a68-301e-0099-698c-156683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144518Z-15767c5fc55rg5b7sh1vuv8t7n0000000d1g000000008b1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:18 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49896	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:18 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 819d4321-f01e-0020-6e8c-15956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144518Z-15767c5fc55fdfx81a30vtr1fw0000000d2g00000000470b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49899	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:18 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: fb0d4061-601e-0050-198c-152c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144518Z-15767c5fc554w2fgapsyvy8ua00000000c6000000000d0cy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:18 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:18 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 76253f94-c01e-0066-328c-15a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144518Z-15767c5fc55ncqdn59ub6rndq00000000cb000000000e6th x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:18 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49903	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:19 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: a7582d38-101e-0028-528c-158f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144519Z-15767c5fc55jdxmppy6cmd24bn00000004wg00000000enyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:19 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49900	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:19 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:19 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 831f1653-b01e-0098-198c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144519Z-15767c5fc55852fxfeh7csa2dn0000000cf000000000tymn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:19 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49902	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:19 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 89fd357a-501e-008f-758c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144519Z-15767c5fc55whfstvfw43u8fp40000000cr000000000rv8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:19 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49901	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:19 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:19 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7585955c-001e-000b-518c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144519Z-15767c5fc55gq5fmm10nm5qqr80000000cp000000000sv9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:19 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49904	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:19 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:19 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: a68e0dd8-f01e-0052-1d8c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144519Z-15767c5fc55n4msds84xh4z67w00000006d0000000008bag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:19 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49909	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:20 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 7baaa16d-b01e-0097-4d8c-154f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144520Z-15767c5fc55xsgnlxyxy40f4m00000000cp0000000003ms8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49905	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:20 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:20 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 757cff4f-401e-000a-528c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144520Z-15767c5fc55qdcd62bsn50hd6s0000000cg0000000009022 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49907	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:20 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:20 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 9bed7ce1-001e-0046-4f8c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144520Z-15767c5fc55d6fcl6x6bw8cpdc0000000cpg000000000y5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:21 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49906	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:20 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:20 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: b2395a75-501e-005b-038c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144520Z-15767c5fc55tsfp92w7yna557w0000000cmg00000000q8fn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:21 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49908	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:21 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 819d44cb-f01e-0020-6f8c-15956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144521Z-15767c5fc55ncqdn59ub6rndq00000000cb000000000e6y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49894	66.29.147.206	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:21 UTC	656	OUT	GET /app/login/favicon.ico HTTP/1.1 Host: qafshah.com.sa Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qafshah.com.sa/app/login/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d049a4d20fb27353a026a72ab79b453c
2024-10-04 14:45:21 UTC	244	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:21 GMT Server: Apache Last-Modified: Fri, 04 Oct 2024 11:44:36 GMT Accept-Ranges: bytes Content-Length: 17174 Vary: Accept-Encoding,User-Agent Connection: close Content-Type: image/x-icon
2024-10-04 14:45:21 UTC	7948	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-04 14:45:21 UTC	8000	IN	Data Raw: 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 Data Ascii: DDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDD
2024-10-04 14:45:21 UTC	1226	IN	Data Raw: 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 99 99 99 99 99 99 99 70 03 33 33 33 33 33 33 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa aa aa aa aa aa aa 50 04 ee ee ee ee ee ee ee 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 Data Ascii: "3333333"""""""3333333p3333333Pfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49910	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:21 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:21 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 9c5056bf-f01e-0003-548c-154453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144521Z-15767c5fc55fdfx81a30vtr1fw0000000cxg00000000rf17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:21 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49912	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:21 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:21 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 89fd37a1-501e-008f-6d8c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144521Z-15767c5fc55jdxmppy6cmd24bn00000004u000000000qykt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:21 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49914	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:21 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:21 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: be019976-401e-0035-5d8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144521Z-15767c5fc554l9xf959gp9cb1s00000006y0000000001sde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:21 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49913	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:21 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:21 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 42bb1403-701e-005c-578c-15bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144521Z-15767c5fc55sdcjq8ksxt4n9mc000000020000000000cysb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:21 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49915	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:21 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 14:45:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 14:45:21 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 56c891cb-f01e-0085-428c-1588ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T144521Z-15767c5fc55fdfx81a30vtr1fw0000000cxg00000000rf1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 14:45:21 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49916	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:21 UTC	718	OUT	POST /suite/RemoteTelemetry.ashx?usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88 HTTP/1.1 Host: euc-common.online.office.com Connection: keep-alive Content-Length: 696 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://vestliaresort-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://vestliaresort-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:45:21 UTC	696	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 55 6e 69 66 69 65 64 55 69 48 6f 73 74 22 2c 22 64 22 3a 22 55 4e 49 46 49 45 44 55 49 48 4f 53 54 22 2c 22 6a 22 3a 22 32 30 32 34 31 30 30 32 2e 35 22 2c 22 72 22 3a 66 61 6c 73 65 2c 22 73 22 3a 22 22 2c 22 77 22 3a 22 64 37 30 66 64 37 63 36 2d 30 63 37 31 2d 65 33 35 31 2d 65 66 62 62 2d 64 66 33 61 65 38 30 36 63 63 38 38 22 2c 22 78 22 3a 22 53 68 61 72 69 6e 67 2e 43 6c 69 65 6e 74 52 65 64 69 72 65 63 74 22 2c 22 79 22 3a 22 31 64 37 33 66 33 34 61 2d 33 62 37 35 2d 34 37 64 63 2d 39 38 63 65 2d 31 36 38 65 62 63 63 36 32 31 32 63 22 2c 22 7a 22 3a 22 73 68 61 72 65 70 6f 69 6e 74 63 6f 6d 22 2c 22 61 63 22 3a 22 64 6f 63 61 73 70 78 22 Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"UnifiedUiHost","d":"UNIFIEDUIHOST","j":"20241002.5","r":false,"s":"","w":"d70fd7c6-0c71-e351-efbb-df3ae806cc88","x":"Sharing.ClientRedirect","y":"1d73f34a-3b75-47dc-98ce-168ebcc6212c","z":"sharepointcom","ac":"docaspx"
2024-10-04 14:45:22 UTC	1190	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: GEU7-ARRAffinity=1692437b9f326c9310e1242bd8d70947a1e9d2a7ef6672e3e37fc2e1b819846c;Path=/;Domain=euc-common.online.office.com; samesite=none; secure; partitioned; httponly X-CorrelationId: 5c6697dd-6c31-4706-b710-57aa87ab4336 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 X-OfficeFE: DB5PEPF0001184E X-OfficeVersion: 16.0.18123.41000 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://vestliaresort-my.sharepoint.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF00013A52 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 38419C0C206E4CDCBB54A2A70DC97A51 Ref B: EWR311000107029 Ref C: 2024-10-04T14:45:21Z Date: Fri, 04 Oct 2024 14:45:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49917	52.108.8.12	443	3480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 14:45:22 UTC	677	OUT	GET /o/AppSettingsHandler.ashx?app=OneNote&usid=d70fd7c6-0c71-e351-efbb-df3ae806cc88&build= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://vestliaresort-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://vestliaresort-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 14:45:22 UTC	1059	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3735 Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 9f27d9a6-e2dc-454c-90c5-70791a4e5fb7 X-UserSessionId: d70fd7c6-0c71-e351-efbb-df3ae806cc88 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: AM4PEPF0000F2BF X-OfficeVersion: 16.0.18006.41011 X-OfficeCluster: GEU6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://vestliaresort-my.sharepoint.com X-Content-Type-Options: nosniff X-OFFICEFD: AM4PEPF0000F2BF X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: F38860FFE3CC44D18226074D494B1DC3 Ref B: EWR311000103009 Ref C: 2024-10-04T14:45:22Z Date: Fri, 04 Oct 2024 14:45:21 GMT Connection: close
2024-10-04 14:45:22 UTC	2999	IN	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 32 38 30 35 33 31 32 32 30 39 35 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 55 6c 73 48 65 61 72 74 42 65 61 74 49 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 43 6f 6d 6d 6f 6e 48 6f 73 74 44 69 61 67 6e 6f 73 74 69 63 73 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 53 68 6f 75 6c 64 4c 6f 67 4a 73 41 70 69 4b 70 69 73 46 6f 72 57 6f 72 64 22 3a 74 72 75 65 2c 22 45 6e 61 62 6c 65 46 72 61 6d 65 50 61 67 65 45 72 72 6f 72 52 65 70 6f 72 74 69 6e 67 46 6f 72 57 6f 72 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 54 65 6c 65 6d 65 74 72 79 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 Data Ascii: {"timestamp":1728053122095,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"EnableWordSessionRefresh
2024-10-04 14:45:22 UTC	736	IN	Data Raw: 31 35 37 37 30 30 2c 35 37 35 31 35 37 37 30 31 2c 35 37 35 31 35 37 37 30 32 2c 35 37 37 32 39 35 33 37 36 2c 35 37 37 36 32 36 35 38 31 2c 35 37 37 38 33 31 31 33 38 2c 35 37 38 31 36 34 30 30 30 2c 35 38 37 38 36 32 39 38 35 2c 35 38 38 30 38 37 33 30 33 2c 35 38 39 31 30 31 30 31 35 2c 35 38 39 31 30 31 30 31 38 2c 35 39 31 36 38 34 36 38 33 2c 35 39 31 37 32 39 33 36 33 2c 35 39 32 31 38 33 33 37 38 2c 35 39 32 32 33 37 38 35 39 2c 35 39 32 32 35 39 31 30 34 2c 35 39 32 35 35 36 35 35 31 2c 35 39 32 38 34 33 31 34 35 2c 35 39 33 37 38 30 38 31 35 2c 35 39 33 38 33 38 32 33 32 2c 35 39 33 38 36 32 39 38 31 2c 35 39 34 31 33 34 35 39 37 2c 35 39 34 33 39 36 37 30 36 2c 35 39 34 38 33 30 36 31 32 2c 35 39 35 31 33 37 31 35 36 2c 35 39 35 33 35 39 37 30 Data Ascii: 157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,588087303,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,59535970

Target ID:	0
Start time:	10:44:38
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	10:44:41
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2344,i,15669229168429719209,4895585725098136349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	10:44:45
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://vestliaresort-my.sharepoint.com/:o:/g/personal/ziga_vestlia_no/Eky579E0q2lOhPOUshOGsHcBMaZdCfwRcrEzHT2ZmUZxNA?e=ksWeaa"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://qafshah.com.sa	Matcher: Template: microsoft matched with high similarity
Source: https://qafshah.com.sa/app/login/	Matcher: Template: microsoft matched with high similarity
Source: https://qafshah.com.sa/app/login/#	Matcher: Template: microsoft matched with high similarity

Source: https://qafshah.com.sa/app/login/	Matcher: Template: microsoft matched
Source: https://qafshah.com.sa/app/login/#	Matcher: Template: microsoft matched

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	DNS traffic detected: DNS query: vestliaresort-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: common.online.office.com
Source: global traffic	DNS traffic detected: DNS query: onenoteonline.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: qafshah.com.sa
Source: global traffic	DNS traffic detected: DNS query: euc-common.online.office.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://vestliaresort-my.sharepoint.com/:o:/g/personal/ziga_vestlia_no/Eky579E0q2lOhPOUshOGsHcBMaZdCfwRcrEzHT2ZmUZxNA?e=ksWeaa

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Windows Analysis Report
https://vestliaresort-my.sharepoint.com/:o:/g/personal/ziga_vestlia_no/Eky579E0q2lOhPOUshOGsHcBMaZdCfwRcrEzHT2ZmUZxNA?e=ksWeaa